VU#846320: Samsung Magician fails to update itself securely

Vulnerability Note VU#846320 Samsung Magician fails to update itself securely Original Release date: 15 Jun 2017 | Last revised: 15 Jun 2017 Overview Samsung Magician fails to securely check for and retrieve updates, which an allow an authenticated attacker to execute arbitrary code with administrator privileges. Description Samsung Magician is a management utility for Samsung SSDs. Prior to version 5.0, Samsung Magician checks for and retrieves updates over HTTP. Prior to version 5.1, Samsung Magician uses HTTPS to perform update…