Vulnerabilities > CVE-2020-7811 - Deserialization of Untrusted Data vulnerability in Samsung Update

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
samsung
CWE-502

Summary

Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication

Vulnerable Configurations

Part Description Count
Application
Samsung
1
OS
Microsoft
1

Common Weakness Enumeration (CWE)