PT-2019-14658 · Samsung · Samsung Galaxy S8+2

Published 2019-11-06 · Updated 2020-08-24 · CVE-2019-16400

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Samsung Galaxy S8 plus version 8.0.0 Samsung Galaxy S3 version 4.3 Samsung Galaxy Note 2 version 4.3

Description The issue allows attackers to send AT commands over Bluetooth, resulting in several Denial of Service (DoS) attacks.

Recommendations For Samsung Galaxy S8 plus version 8.0.0, restrict access to Bluetooth functionality until a patch is available. For Samsung Galaxy S3 version 4.3, consider disabling Bluetooth connectivity to minimize the risk of exploitation. For Samsung Galaxy Note 2 version 4.3, avoid using Bluetooth for sensitive operations until the issue is resolved.

Fix

Related Identifiers

CVE-2019-16400

Affected Products

Samsung Galaxy Note 2

Samsung Galaxy S3

Samsung Galaxy S8

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-16400 · Security Note
• https://openconf.org/acsac2019/modules/request.php?module=oc_program&action=summary.php&id=210 · Note