CVE-2020-25048
Last modified
CVE-2020-25048 is a medium-severity vulnerability rated 4.6/10 on the CVSS scale. An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticated downloads, aka file injection. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticated downloads, aka file injection. The Samsung ID is SVE-2020-17760 (August 2020).
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 10.0 |
References
- https://security.samsungmobile.com/securityUpdate.smsbVendor Advisory
- https://security.samsungmobile.com/securityUpdate.smsbVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-25048?
How severe is CVE-2020-25048?
How do I fix CVE-2020-25048?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-25042An arbitrary file upload issue exists in Mara CMS 7.5. In or…7.2
- CVE-2020-25043The installer of Kaspersky VPN Secure Connection prior to 5.…7.1
- CVE-2020-25044Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was v…7.1
- CVE-2020-25045Installers of Kaspersky Security Center and Kaspersky Securi…7.8
- CVE-2020-25046An issue was discovered on Samsung mobile devices with O(8.x…5.5
- CVE-2020-25047An issue was discovered on Samsung mobile devices with P(9.0…5.5
- CVE-2020-25049An issue was discovered on Samsung mobile devices with P(9.0…9.8
- CVE-2020-2505If exploited, this vulnerability could allow attackers to ga…2.3
- CVE-2020-25050An issue was discovered on Samsung mobile devices with P(9.0…7.5
- CVE-2020-25051An issue was discovered on Samsung mobile devices with P(9.0…7.5
- CVE-2020-25052An issue was discovered on Samsung mobile devices with Q(10.…9.8
- CVE-2020-25053An issue was discovered on Samsung mobile devices with Q(10.…9.8
Are you affected by CVE-2020-25048?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST