CVE-2016-4032

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301.

Score

CVSS 3.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2017-04-13

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Galaxy Note 3 Firmware (Samsung)
• Galaxy S4 Firmware (Samsung)
• Galaxy S4 Mini Firmware (Samsung)
• Galaxy S4 Mini Lte Firmware (Samsung)
• Galaxy S6 Firmware (Samsung)

References

• http://www.securityfocus.com/bid/97650
• https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004