CVSS: 4.6EPSS: 0%CPEs: 10EXPL: 1CVE-2016-4032
https://notcve.org/view.php?id=CVE-2016-4032
Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301. Samsung en los dispositivos SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), y GT-I9505 build I9505XXUHOJ2 (Galaxy S4) no bloquean AT+USBDEBUG y AT+WIFIVALUE, lo que permite a los atacantes modificar la configuración de Android aprovechando el acceso AT, también conocido como SVE-2016-5301. • http://www.securityfocus.com/bid/97650 https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004 • CWE-284: Improper Access Control •
CVSS: 6.8EPSS: 0%CPEs: 10EXPL: 1CVE-2016-4031
https://notcve.org/view.php?id=CVE-2016-4031
Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301. Samsung en los dispositivos SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), y GT-I9505 build I9505XXUHOJ2 (Galaxy S4) permiten a los atacantes enviar comandos AT conectando el dispositivo a un host Linux, también conocido como SVE-2016-5301. • http://www.securityfocus.com/bid/97703 https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004 • CWE-284: Improper Access Control •
CVSS: 4.6EPSS: 0%CPEs: 4EXPL: 0CVE-2013-4763
https://notcve.org/view.php?id=CVE-2013-4763
Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission. Samsung Galaxy S3/S4 expone un componente desprotegido que permite mensajes de texto SMS arbitrarios sin solicitar permiso • http://archives.neohapsis.com/archives/bugtraq/2013-07/0108.html https://www.securityfocus.com/bid/61280 • CWE-276: Incorrect Default Permissions •
CVSS: 4.3EPSS: 0%CPEs: 4EXPL: 0CVE-2013-4764
https://notcve.org/view.php?id=CVE-2013-4764
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission. Samsung Galaxy S3/S4, expone un componente desprotegido permitiendo a una aplicación no privilegiada enviar mensajes de texto arbitrarios a destinos arbitrarios sin permiso. • http://shouji.360.cn/securityReportlist/CVE-2013-4764.html https://seclists.org/bugtraq/2013/Jul/107 • CWE-276: Incorrect Default Permissions •