CVE-2014-8346

The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service (screen locking with an arbitrary code) by triggering unexpected Find My Mobile network traffic.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2014-10-24

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Findmymobile (Samsung)
• Mobile (Samsung)

References

• https://www.youtube.com/watch?v=Q3adkpOEjyI
• https://www.youtube.com/watch?v=YufuOYQoDOY