CVE-2018-16270

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-01-22

Last modified

2024-08-05

Weaknesses

CWE-269

Affected products

• Galaxy Gear Firmware (Samsung)
• Gear 2 Firmware (Samsung)
• Gear Fit 2 Firmware (Samsung)
• Gear Fit 2 Pro Firmware (Samsung)
• Gear Fit Firmware (Samsung)
• Gear Live Firmware (Samsung)
• Gear S2 Firmware (Samsung)
• Gear S3 Firmware (Samsung)
• Gear S Firmware (Samsung)
• Gear Sport Firmware (Samsung)

References

• https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%2…
• https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be