• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

CERT/CC warns for security issue with Samsung Magician SSD software

Joined
Jan 5, 2006
Messages
18,542 (2.72/day)
System Name AlderLake
Processor Intel i7 12700K P-Cores @ 5Ghz
Motherboard Gigabyte Z690 Aorus Master
Cooling Noctua NH-U12A 2 fans + Thermal Grizzly Kryonaut Extreme + 5 case fans
Memory 32GB DDR5 Corsair Dominator Platinum RGB 6000MT/s CL36
Video Card(s) MSI RTX 2070 Super Gaming X Trio
Storage Samsung 980 Pro 1TB + 970 Evo 500GB + 850 Pro 512GB + 860 Evo 1TB x2
Display(s) 23.8" Dell S2417DG 165Hz G-Sync 1440p
Case Be quiet! Silent Base 600 - Window
Audio Device(s) Panasonic SA-PMX94 / Realtek onboard + B&O speaker system / Harman Kardon Go + Play / Logitech G533
Power Supply Seasonic Focus Plus Gold 750W
Mouse Logitech MX Anywhere 2 Laser wireless
Keyboard RAPOO E9270P Black 5GHz wireless
Software Windows 11
Benchmark Scores Cinebench R23 (Single Core) 1936 @ stock Cinebench R23 (Multi Core) 23006 @ stock
"The CERT Coordination Centre (CERT/CC) of the Carnegie Mellon University warns for a vulnerability in Samsung’s Magician software that makes it possible, in certain cases, to utilize it to infect computers with malware. Samsung Magician is a tool to manage, test and update Samsung SSDs."

"Prior to version 5.0 of the software, the automatic update feature used unencrypted HTTP to check for, and download, new updates. With version 5.0, Samsung changed to HTTPS, but the tool didn’t properly check the used SSL certificate. This makes it possible for an attacker on the same network as the victim, to perform a man-in-the-middle attack. E.g the attacker could offer a malicious update that could be executed with administrator privileges.

Samsung has now released Magician 5.1. Because the automatic update feature is vulnerable, CERT/CC advises to update Samsung Magician manually till Samsung releases an update that fixes the vulnerability.
"

http://www.myce.com/news/certcc-warns-security-issue-samsung-magician-ssd-software-82157/
https://www.samsung.com/semiconductor/minisite/ssd/download/tools.html?CID=AFL-hq-mul-0813-11000170
 
Top