PT-2019-14658 · Samsung · Samsung Galaxy S8+2

Publicado 2019-11-06 · Atualizado 2020-08-24 · CVE-2019-16400

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Samsung Galaxy S8 plus version 8.0.0 Samsung Galaxy S3 version 4.3 Samsung Galaxy Note 2 version 4.3

Description The issue allows attackers to send AT commands over Bluetooth, resulting in several Denial of Service (DoS) attacks.

Recommendations For Samsung Galaxy S8 plus version 8.0.0, restrict access to Bluetooth functionality until a patch is available. For Samsung Galaxy S3 version 4.3, consider disabling Bluetooth connectivity to minimize the risk of exploitation. For Samsung Galaxy Note 2 version 4.3, avoid using Bluetooth for sensitive operations until the issue is resolved.

Correção

Identificadores relacionados

CVE-2019-16400

Produtos afetados

Samsung Galaxy Note 2

Samsung Galaxy S3

Samsung Galaxy S8

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-16400 · Nota de Segurança
• https://openconf.org/acsac2019/modules/request.php?module=oc_program&action=summary.php&id=210 · Nota