CVE Vulnerabilities

CVE-2024-31955

Improper Certificate Validation

Published: Oct 15, 2024 | Modified: Oct 30, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Samsung eMMC with KLMAG2GE4A and KLM8G1WEMB firmware. Code bypass through Electromagnetic Fault Injection allows an attacker to successfully authenticate and write to the RPMB (Replay Protected Memory Block) area without possessing secret information.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Potential Mitigations

References