CVE-2018-16270
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.
La serie Samsung Galaxy Gear versiones anteriores al build RE2, incluye la utilidad hcidump sin restricción de privilegios o permisos. Esto permite a un proceso no privilegiado descargar paquetes Bluetooth HCI en una ruta de archivo arbitraria.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-08-31 CVE Reserved
- 2020-01-22 CVE Published
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- 2024-09-06 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-269: Improper Privilege Management
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Samsung Search vendor "Samsung" | Galaxy Gear Firmware Search vendor "Samsung" for product "Galaxy Gear Firmware" | < re2 Search vendor "Samsung" for product "Galaxy Gear Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Galaxy Gear Search vendor "Samsung" for product "Galaxy Gear" | - | - |
Safe
|
| Samsung Search vendor "Samsung" | Gear 2 Firmware Search vendor "Samsung" for product "Gear 2 Firmware" | < re2 Search vendor "Samsung" for product "Gear 2 Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Gear 2 Search vendor "Samsung" for product "Gear 2" | - | - |
Safe
|
| Samsung Search vendor "Samsung" | Gear Live Firmware Search vendor "Samsung" for product "Gear Live Firmware" | < re2 Search vendor "Samsung" for product "Gear Live Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Gear Live Search vendor "Samsung" for product "Gear Live" | - | - |
Safe
|
| Samsung Search vendor "Samsung" | Gear S Firmware Search vendor "Samsung" for product "Gear S Firmware" | < re2 Search vendor "Samsung" for product "Gear S Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Gear S Search vendor "Samsung" for product "Gear S" | - | - |
Safe
|
| Samsung Search vendor "Samsung" | Gear S2 Firmware Search vendor "Samsung" for product "Gear S2 Firmware" | < re2 Search vendor "Samsung" for product "Gear S2 Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Gear S2 Search vendor "Samsung" for product "Gear S2" | - | - |
Safe
|
| Samsung Search vendor "Samsung" | Gear S3 Firmware Search vendor "Samsung" for product "Gear S3 Firmware" | < re2 Search vendor "Samsung" for product "Gear S3 Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Gear S3 Search vendor "Samsung" for product "Gear S3" | - | - |
Safe
|
| Samsung Search vendor "Samsung" | Gear Sport Firmware Search vendor "Samsung" for product "Gear Sport Firmware" | < re2 Search vendor "Samsung" for product "Gear Sport Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Gear Sport Search vendor "Samsung" for product "Gear Sport" | - | - |
Safe
|
| Samsung Search vendor "Samsung" | Gear Fit Firmware Search vendor "Samsung" for product "Gear Fit Firmware" | < re2 Search vendor "Samsung" for product "Gear Fit Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Gear Fit Search vendor "Samsung" for product "Gear Fit" | - | - |
Safe
|
| Samsung Search vendor "Samsung" | Gear Fit 2 Firmware Search vendor "Samsung" for product "Gear Fit 2 Firmware" | < re2 Search vendor "Samsung" for product "Gear Fit 2 Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Gear Fit 2 Search vendor "Samsung" for product "Gear Fit 2" | - | - |
Safe
|
| Samsung Search vendor "Samsung" | Gear Fit 2 Pro Firmware Search vendor "Samsung" for product "Gear Fit 2 Pro Firmware" | < re2 Search vendor "Samsung" for product "Gear Fit 2 Pro Firmware" and version " < re2" | - |
Affected
| in | Samsung Search vendor "Samsung" | Gear Fit 2 Pro Search vendor "Samsung" for product "Gear Fit 2 Pro" | - | - |
Safe
|