CVE-2018-20135

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-06-07 · updated 2026-06-17
Weakness: CWE-295

Description

Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps into using an arbitrary hostname for which the attacker can provide a valid SSL certificate, and emulate the API of the app store to modify existing apps at installation time. The specific flaw involves an HTTP method to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer, and a missing app signature validation in the application XML. An attacker can exploit this vulnerability to achieve Remote Code Execution on the device. The Samsung ID is SVE-2018-12071.

Affected products

Samsung Galaxy Apps: before 4.4.01.7 — fixed in 4.4.01.7

How to fix

Upgrade to a fixed version: Samsung Galaxy Apps 4.4.01.7. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-20135 or the next vulnerability affects your stack