4.3med
CVE-2016-11050
An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software.
Published 6 y ago · modified 4 mo ago · JSON
CVSS
4.3
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 21%
Public exploits
0
none known
Summary
An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 (March 2016).
Exploit prediction (EPSS)
0.28% probability of exploitation in the next 30 days, higher than 21% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 4.3 | CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:P/A:N |
References
- security.samsungmobile.com /securityUpdate.smsb · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-11050
- NVD: CVE-2016-11050
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.