CVE-2018-20135: samsung galaxy_apps Improper Certificate Validation

Vulnerability summary

CVE-2018-20135 is a high (CVSS 8.1) Improper Certificate Validation vulnerability in samsung galaxy_apps. EPSS estimates a 1.76% chance of exploitation in the next 30 days, higher than 77.5% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 07-06-2019
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps into using an arbitrary hostname for which the attacker can provide a valid SSL certificate, and emulate the API of the app store to modify existing apps at installation time. The specific flaw involves an HTTP method to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer, and a missing app signature validation in the application XML. An attacker can exploit this vulnerability to achieve Remote Code Execution on the device. The Samsung ID is SVE-2018-12071.

• CWE-295Improper Certificate ValidationThe product does not validate, or incorrectly validates, a certificate.