Vulnerability Details CVE-2016-4030
Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.7%
CVSS Severity
CVSS v3 Score 6.8
CVSS v2 Score 4.6
References
Products affected by CVE-2016-4030
-
cpe:2.3:h:samsung:galaxy_note_3:-
-
cpe:2.3:h:samsung:galaxy_s4:-
-
cpe:2.3:h:samsung:galaxy_s4_mini:-
-
cpe:2.3:h:samsung:galaxy_s4_mini_lte:-
-
cpe:2.3:h:samsung:galaxy_s6:-
-
cpe:2.3:o:samsung:galaxy_note_3_firmware:n9005xxugbob6
-
cpe:2.3:o:samsung:galaxy_s4_firmware:i9505xxuhoj2
-
cpe:2.3:o:samsung:galaxy_s4_mini_firmware:i9192xxubnb1
-
cpe:2.3:o:samsung:galaxy_s4_mini_lte_firmware:i9195xxucol1
-
cpe:2.3:o:samsung:galaxy_s6_firmware:g920fxxu2coh2