CVE-2020-10855: 
NixOS vulnerability analysis and mitigation

An issue was discovered on Samsung mobile devices with P(9.0) software that allows attackers to bypass Factory Reset Protection (FRP) via AppTray. The vulnerability was identified with Samsung ID SVE-2019-16192 and was disclosed in January 2020 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 4.6 (MEDIUM) with the vector string CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. This indicates that the vulnerability requires physical access (AV:P), has low attack complexity (AC:L), requires no privileges (PR:N), needs no user interaction (UI:N), has unchanged scope (S:U), has no impact on confidentiality (C:N), high impact on integrity (I:H), and no impact on availability (A:N) (NVD).

The vulnerability allows attackers with physical access to bypass Factory Reset Protection (FRP), which could lead to unauthorized access to the device, compromising the device's security measures (NVD).

Samsung has addressed this vulnerability through a security update released in January 2020. Users should ensure their devices are updated with the latest security patches (Samsung Mobile Security).