CVE-2018-11614

HIGH 8.8CVE-2018-11614 · Published 24/09/2018 · updated 17/06/2026

In short

CVE-2018-11614 is a HIGH (CVSS 8.8) vulnerability affecting samsung members (samsung).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.4% of all vulnerabilities.
Fix: update to 2.4.25 or later.

Package	Affected versions	Patched versions
samsung members samsung	`< 2.4.25`	`2.4.25`

Description

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Intents. The issue lies in the ability to send an Intent that would not otherwise be reachable. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application. Was ZDI-CAN-5361.

References

zerodayinitiative.com/advisories/ZDI-18-562 · Third Party Advisory

More vulnerabilities in samsung members

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free