CVE-2012-6334
 
Severity Score
2.9
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."
La función "Track My Mobile" en el subsistema SamsungDive para Android en los dispositivos Samsung Galaxy no implementa correctamente las APIs de localización, lo que permite a atacantes físicamente próximos proporcionar datos de localización de su elección a través de un "sencillo spoofer de localización GPS comúnmente disponible."
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-12-13 CVE Reserved
- 2012-12-31 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (1)
URL | Tag | Source |
---|---|---|
http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html | X_refsource_misc |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Samsung Search vendor "Samsung" | Samsungdive Search vendor "Samsung" for product "Samsungdive" | - | - |
Affected
| in | Samsung Search vendor "Samsung" | Galaxy Note 2 Search vendor "Samsung" for product "Galaxy Note 2" | - | - |
Safe
|
Samsung Search vendor "Samsung" | Samsungdive Search vendor "Samsung" for product "Samsungdive" | - | - |
Affected
| in | Samsung Search vendor "Samsung" | Galaxy S Search vendor "Samsung" for product "Galaxy S" | - | - |
Safe
|
Samsung Search vendor "Samsung" | Samsungdive Search vendor "Samsung" for product "Samsungdive" | - | - |
Affected
| in | Samsung Search vendor "Samsung" | Galaxy S2 Search vendor "Samsung" for product "Galaxy S2" | - | - |
Safe
|