CVE-2020-35550: 
NixOS vulnerability analysis and mitigation

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software where attackers can bypass Factory Reset Protection (FRP) via StatusBar. This vulnerability was identified with Samsung ID SVE-2020-17888 and was disclosed in December 2020 (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 CRITICAL with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability can be exploited over the network without requiring privileges or user interaction, and successful exploitation can result in high impact to confidentiality, integrity, and availability (NVD).

A successful exploitation of this vulnerability allows attackers to bypass the Factory Reset Protection (FRP) security feature on affected Samsung mobile devices. This could potentially allow unauthorized access to devices that should be protected by FRP (NVD).

The vulnerability is considered easily exploitable due to its low attack complexity and no requirements for privileges or user interaction. The attack vector is network-accessible, making it possible to exploit the vulnerability remotely (NVD).

Samsung has addressed this vulnerability through their security update process. Users of affected devices should ensure they have applied the latest security patches provided by Samsung (Samsung Mobile Security).