Security expert finds vulnerability in Samsung’s Find My Mobile service [Updated]

October 28, 2014

Editorial Note: Talk Android may contain affiliate links on some articles. If you make a purchase through these links, we will earn a commission at no extra cost to you. Learn more.

Samsung_Logo_02_TA_CES_2014

Samsung's Find My Mobile service has come under fire by NIST and security researcher Mohamed Baset regarding an exploit that allows attackers to remotely lock, ring or wipe Samsung devices. Baset points to a vulnerability in Samsung's service that doesn't validate the lock code information it receives, allowing an attacker to flood the device with network traffic and do their bidding. No word from Samsung on a patch, but for now we recommend disabling the service until they address the security issue.

Update:

Samsung issued a statement to us and it looks like it only affected the Web interface, not mobile devices. Furthermore, they patched the Web UI on October 13.

The reported issue occurred on the Find My Mobile Web site, and was not a problem on any mobile device. This Web UI was fixed with a patch update on October 13.

Source: Engadget

James Gray Author

Jim is a musician/nerd/burrito enthusiast living north of Boston. In his free time (of which he has none) he plays guitar and tinkers with the absurd amount of Android devices he owns. Born and raised on a farm in the backwoods of Vermont, Jim spent a few years after high school traveling the states, settling temporarily on Massachusetts. His first Android phone was an HTC G1, and he's had countless devices since. He is also really good at convincing people to buy stuff. He currently lives with his girlfriend and writes for Talk Android between selling cell phones, playing in a band and running a record label.