VULNERABILITY

NowSecure has discovered that Samsung Account is susceptible to man-in-the-middle attack (CVE 2015-0864). The vulnerability allows a remote attacker to install a malicious app, which could steal data or attempt other attacks.

RECOMMENDATION

Since this is a system app, you cannot uninstall. On a trusted network, open any app that requires Samsung login, and you should be prompted to update. Alternatively you can disable the app in Settings > Application manager.

Review technical details about this vulnerability in the technical blog post.

AFFECTED VERSIONS

Samsung Account app

Name Version Vendor Platform
com.osp.app.signin 2.1.0061 Google Android
com.osp.app.signin 2.1.0047 Google Android
com.osp.app.signin 2.1.0039 Google Android
com.osp.app.signin 2.1.0037 Google Android
com.osp.app.signin 2.1.0033 Google Android
com.osp.app.signin 2.1.0031 Google Android
com.osp.app.signin 2.1.0028 Google Android
com.osp.app.signin 2.1.0024 Google Android
com.osp.app.signin 2.1.0014 Google Android
com.osp.app.signin 2.1.0010 Google Android
com.osp.app.signin 2.0.0154 Google Android
com.osp.app.signin 2.0.0151 Google Android
com.osp.app.signin 2.0.0148 Google Android
com.osp.app.signin 2.0.0146 Google Android
com.osp.app.signin 2.0.0144 Google Android
com.osp.app.signin 2.0.0140 Google Android
com.osp.app.signin 2.0.0125 Google Android
com.osp.app.signin 2.0.0123 Google Android
com.osp.app.signin 2.0.0116 Google Android
com.osp.app.signin 2.0.0114 Google Android
com.osp.app.signin 2.0.0111 Google Android
com.osp.app.signin 2.0.0110 Google Android
com.osp.app.signin 2.0.0105 Google Android
com.osp.app.signin 2.0.0097 Google Android
com.osp.app.signin 2.0.0095 Google Android
com.osp.app.signin 2.0.0089 Google Android
com.osp.app.signin 2.0.0080 Google Android
com.osp.app.signin 2.0.0079 Google Android
com.osp.app.signin 2.0.0078 Google Android
com.osp.app.signin 2.0.0060 Google Android
com.osp.app.signin 2.0.0042 Google Android
com.osp.app.signin 2.0.0040 Google Android
com.osp.app.signin 1.6.0059 Google Android
com.osp.app.signin 1.6.0057 Google Android
com.osp.app.signin 1.6.0039 Google Android
com.osp.app.signin 1.6.0033 Google Android
com.osp.app.signin 1.6.0028 Google Android
com.osp.app.signin 1.6.0015 Google Android
com.osp.app.signin 1.6.0010 Google Android
com.osp.app.signin 1.5.0459 Google Android
com.osp.app.signin 1.5.0450 Google Android
com.osp.app.signin 1.5.0444 Google Android
com.osp.app.signin 1.5.0440 Google Android
com.osp.app.signin 1.5.0436 Google Android
com.osp.app.signin 1.5.0430 Google Android
com.osp.app.signin 1.5.0427 Google Android
com.osp.app.signin 1.5.0422 Google Android
com.osp.app.signin 1.5.0421 Google Android
com.osp.app.signin 1.5.0419 Google Android
com.osp.app.signin 1.5.0414 Google Android
com.osp.app.signin 1.5.0413 Google Android
com.osp.app.signin 1.5.0412 Google Android
com.osp.app.signin 1.5.0410 Google Android
com.osp.app.signin 1.5.0406 Google Android
com.osp.app.signin 1.5.0394 Google Android
com.osp.app.signin 1.5.0392 Google Android
com.osp.app.signin 1.5.0391 Google Android
com.osp.app.signin 1.5.0390 Google Android
com.osp.app.signin 1.5.0388 Google Android
com.osp.app.signin 1.5.0386 Google Android
com.osp.app.signin 1.5.0385 Google Android
com.osp.app.signin 1.5.0384 Google Android
com.osp.app.signin 1.5.0381 Google Android
com.osp.app.signin 1.5.0380 Google Android
com.osp.app.signin 1.5.0376 Google Android
com.osp.app.signin 1.5.0375 Google Android
com.osp.app.signin 1.5.0365 Google Android
com.osp.app.signin 1.5.0362 Google Android
com.osp.app.signin 1.5.0360 Google Android
com.osp.app.signin 1.5.0358 Google Android
com.osp.app.signin 1.5.0356 Google Android
com.osp.app.signin 1.5.0355 Google Android
com.osp.app.signin 1.5.0350 Google Android
com.osp.app.signin 1.5.0348 Google Android
com.osp.app.signin 1.5.0340 Google Android
com.osp.app.signin 1.5.0338 Google Android
com.osp.app.signin 1.5.0336 Google Android
com.osp.app.signin 1.5.0331 Google Android
com.osp.app.signin 1.5.0328 Google Android
com.osp.app.signin 1.5.0325 Google Android
com.osp.app.signin 1.5.0324 Google Android
com.osp.app.signin 1.5.0319 Google Android
com.osp.app.signin 1.5.0318 Google Android
com.osp.app.signin 1.5.0314 Google Android
com.osp.app.signin 1.5.0307 Google Android
com.osp.app.signin 1.5.0306 Google Android
com.osp.app.signin 1.5.0302 Google Android
com.osp.app.signin 1.5.0243 Google Android
com.osp.app.signin 1.5.0241 Google Android
com.osp.app.signin 1.5.0239 Google Android
com.osp.app.signin 1.5.0238 Google Android
com.osp.app.signin 1.5.0229 Google Android
com.osp.app.signin 1.5.0226 Google Android
com.osp.app.signin 1.5.0224 Google Android
com.osp.app.signin 1.5.0223 Google Android
com.osp.app.signin 1.5.0222 Google Android
com.osp.app.signin 1.5.0219 Google Android
com.osp.app.signin 1.5.0218 Google Android
com.osp.app.signin 1.5.0214 Google Android
com.osp.app.signin 1.5.0213 Google Android
com.osp.app.signin 1.5.0210 Google Android
com.osp.app.signin 1.5.0208 Google Android
com.osp.app.signin 1.5.0116 Google Android
com.osp.app.signin 1.5.0018 Google Android
com.osp.app.signin 1.5.0017 Google Android
com.osp.app.signin 1.4.0424 Google Android
com.osp.app.signin 1.4.0405 Google Android
com.osp.app.signin 1.4.0394 Google Android
com.osp.app.signin 1.4.0389 Google Android
com.osp.app.signin 1.4.0377 Google Android
com.osp.app.signin 1.4.0374 Google Android
com.osp.app.signin 1.4.0370 Google Android
com.osp.app.signin 1.4.0369 Google Android
com.osp.app.signin 1.4.0365 Google Android
com.osp.app.signin 1.4.0363 Google Android
com.osp.app.signin 1.4.0361 Google Android
com.osp.app.signin 1.4.0354 Google Android
com.osp.app.signin 1.4.0349 Google Android
com.osp.app.signin 1.4.0345 Google Android
com.osp.app.signin 1.4.0343 Google Android
com.osp.app.signin 1.4.0335 Google Android
com.osp.app.signin 1.4.0321 Google Android
com.osp.app.signin 1.4.0317 Google Android
com.osp.app.signin 1.4.0309 Google Android
com.osp.app.signin 1.4.0299 Google Android
com.osp.app.signin 1.4.0250 Google Android
com.osp.app.signin 1.4.0237 Google Android
com.osp.app.signin 1.4.0236 Google Android
com.osp.app.signin 1.4.0235 Google Android
com.osp.app.signin 1.4.0230 Google Android
com.osp.app.signin 1.4.0216 Google Android
com.osp.app.signin 1.4.0214 Google Android
com.osp.app.signin 1.4.0208 Google Android
com.osp.app.signin 1.4.0202 Google Android
com.osp.app.signin 1.4.0200 Google Android
com.osp.app.signin 1.4.0142 Google Android
com.osp.app.signin 1.4.0139 Google Android
com.osp.app.signin 1.4.0134 Google Android
com.osp.app.signin 1.4.0126 Google Android
com.osp.app.signin 1.4.0124 Google Android
com.osp.app.signin 1.4.0117 Google Android
com.osp.app.signin 1.4.0116 Google Android
com.osp.app.signin 1.4.0111 Google Android
com.osp.app.signin 1.4.0109 Google Android
com.osp.app.signin 1.4.0081 Google Android
com.osp.app.signin 1.4.0077 Google Android
com.osp.app.signin 1.4.0074 Google Android
com.osp.app.signin 1.4.0063 Google Android
com.osp.app.signin 1.4.0062 Google Android
com.osp.app.signin 1.4.0053 Google Android
com.osp.app.signin 1.4.0040 Google Android
com.osp.app.signin 1.4.0032 Google Android
com.osp.app.signin 1.4.0014 Google Android
com.osp.app.signin 1.4.0013 Google Android
com.osp.app.signin 1.3.0870 Google Android
com.osp.app.signin 1.3.0859 Google Android
com.osp.app.signin 1.3.0857 Google Android
com.osp.app.signin 1.3.0856 Google Android
com.osp.app.signin 1.3.0853 Google Android
com.osp.app.signin 1.3.0849 Google Android
com.osp.app.signin 1.3.0848 Google Android
com.osp.app.signin 1.3.0846 Google Android
com.osp.app.signin 1.3.0844 Google Android
com.osp.app.signin 1.3.0838 Google Android
com.osp.app.signin 1.3.0835 Google Android
com.osp.app.signin 1.3.0831 Google Android
com.osp.app.signin 1.3.079 Google Android
com.osp.app.signin 1.3.069 Google Android
com.osp.app.signin 1.3.068 Google Android
com.osp.app.signin 1.3.064 Google Android
com.osp.app.signin 1.3.060 Google Android
com.osp.app.signin 1.3.056 Google Android
com.osp.app.signin 1.3.053 Google Android
com.osp.app.signin 1.3.048 Google Android
com.osp.app.signin 1.3.046 Google Android
com.osp.app.signin 1.3.024 Google Android
com.osp.app.signin 1.2.157 Google Android
What to read next:

NowSecure Marketing

linkedin icon twitter icon