A high-risk alert has been issued by the government for users of Samsung mobile phones. Please review the following information for details.

Samsung

Last week, the Indian government issued additional security warnings specifically directed at users of Samsung Galaxy phones. The security advisory, issued by the Indian Computer Emergency Response Team (CERT-In) on December 13, underscores multiple vulnerabilities affecting both older and newer models of Samsung Galaxy phones, impacting millions of users.

Categorized as high-risk, the security alert emphasizes the urgent need for existing Samsung users to expeditiously update their phone's operating system or firmware. According to CERT, the reported vulnerabilities in Samsung products could potentially enable attackers to bypass implemented security restrictions, gain access to sensitive information, and execute arbitrary code on the targeted systems." CERT said in its vulnerability note.

According to the report, the vulnerable software includes Samsung Mobile Android versions 11, 12, 13, and 14.

The identified vulnerabilities act as weak points in the device's security defenses. Exploiting these openings, a cyber attacker could:

1.Obtain the phone's secret code (SIM PIN).

2.Issue loud commands to the phone (broadcast with elevated privilege).

3.Access private AR Emoji files.

4.Manipulate the clock on the castle gate (Knox Guard lock).

5.Explore the phone's files (access arbitrary files).

6.Steal important information (sensitive information).

7.Control the phone like a puppet (execute arbitrary code).

8.Take over the entire phone (compromise the targeted system).

Instructions for Samsung smartphone users:

Users of Samsung Galaxy phones are strongly advised to promptly update their device's operating system (OS) and firmware, as recommended in the reports. Failure to do so could expose Samsung models to potential threats from hackers. Neglecting system updates may offer hackers an opportunity to bypass device security and gain unauthorized access to sensitive data. Samsung has issued a fix for these threats, and users are urged to install it as soon as possible.