CVE-2019-17668 - Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involving a third-party screen protector

Back Back to CVE browser

MEDIUM

Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involving a third-party screen protector

Published Oct 17, 2019

6.8

MEDIUM

CVSS 3.1

EPSS 0.40%

Description

Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involving a third-party screen protector.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7973
Advisory
https://news.ycombinator.com/item?id=21280205
x_refsource_MISCIssue TrackingThird Party Advisory
https://www.engadget.com/2019/10/17/samsung-patch-fingerprint-reader/
x_refsource_MISCPress/Media CoverageThird Party Advisory
https://www.forbes.com/sites/gordonkelly/2019/10/15/samsung-galaxy-s10-note10-plus-fingerprint-reader-warning-upgrade-galaxy-s11
x_refsource_MISCPress/Media CoverageThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7973		Advisory
https://news.ycombinator.com/item?id=21280205		x_refsource_MISCIssue TrackingThird Party Advisory
https://www.engadget.com/2019/10/17/samsung-patch-fingerprint-reader/		x_refsource_MISCPress/Media CoverageThird Party Advisory
https://www.forbes.com/sites/gordonkelly/2019/10/15/samsung-galaxy-s10-note10-plus-fingerprint-reader-warning-upgrade-galaxy-s11		x_refsource_MISCPress/Media CoverageThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 17, 2019

Updated Aug 5, 2024

Reserved Oct 17, 2019

Link CVE-2019-17668

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-17668

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 17, 2019

Updated Aug 5, 2024

Link EUVD-2019-7973

GitHub

No data