Login Request a demo
Medium severity · published Nov 6, 2019
CVE-2019-16401
Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android…
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build Number: JSS15J.I9300XXUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: I9300XXUGNA8), and Samsung Galaxy Note 2 (Android version: 4.3, Build Number: JSS15J.I9300XUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: N7100DDUFND1) devices allow injection of AT+CIMI and AT+CGSN over Bluetooth, leaking sensitive information such as IMSI, IMEI, call status, call setup stage, internet service status, signal strength, current roaming status, battery level, and call held status.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Galaxy Note 2 Firmware · Samsung
All versions, or not specified · source: NVD
GS
Galaxy S3 Firmware · Samsung
All versions, or not specified · source: NVD
GS
Galaxy S8 Plus Firmware · Samsung
All versions, or not specified · source: NVD
Affected product
GN
Galaxy Note 2 Firmware
Samsung
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-16401
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-16401
Third Party Advisory
https://www.openconf.org/acsac2019/modules/request.php?module=oc_program&action=summary.php&id=210
More from Galaxy Note 2 Firmware
6.5
CVE-2019-16400
Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android…