CVE-2018-21080: 
NixOS vulnerability analysis and mitigation

An issue was discovered on Samsung mobile devices with N(7.x) software. A physically proximate attacker wielding a magnet can activate NFC to bypass the lockscreen. The Samsung ID is SVE-2017-10897 (March 2018) (NVD).

The vulnerability has a CVSS v3.1 Base Score of 4.6 MEDIUM (Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) and CVSS v2.0 Base Score of 2.1 LOW (Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N). The vulnerability is classified under CWE-326 (Inadequate Encryption Strength) (NVD).

If exploited, this vulnerability allows an attacker with physical proximity to bypass the lockscreen security mechanism using a magnet to activate NFC functionality, potentially exposing sensitive information on the device (NVD).

The vulnerability requires physical proximity to exploit, with low attack complexity and no privileges or user interaction needed. The attack vector is physical (P), making it necessary for an attacker to be physically close to the target device with a magnet (NVD).

Samsung has addressed this vulnerability in their security updates. Users should ensure their devices are updated with the latest security patches (Samsung Mobile Security).