CVE-2016-11050 - OpenCVE

An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 (March 2016).

Attack Vector Physical

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

AV:L/AC:L/Au:N/C:N/I:P/A:N

Vendors & Products
CPE Configurations

Vendors	Products
Samsung	S5 Firmware Note2 Firmware S4 S3 Firmware S3 S4 Firmware Note3 Note3 Firmware S5 Note2

Configuration 1 [-]

AND

cpe:2.3:o:samsung:s5_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:s5:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:samsung:note3_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:note3:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:samsung:s4_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:s4:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:samsung:note2_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:note2:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:samsung:s3_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:s3:-:*:*:*:*:*:*:*

References

Link	Resource
https://security.samsungmobile.com/securityUpdate.smsb	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2020-04-07T12:41:16

Updated: 2020-04-07T12:41:16

Reserved: 2020-04-07T00:00:00

Link: CVE-2016-11050

JSON object: View

NVD Information

Status : Analyzed

Published: 2020-04-07T13:15:13.180

Modified: 2020-04-08T16:07:13.903

Link: CVE-2016-11050

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-noinfo

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:s5_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6A781FA-6701-41A9-85AB-D27D848B9013", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:samsung:s5:-:*:*:*:*:*:*:*", "matchCriteriaId": "E64786A2-BCFD-4FF9-BBD3-7C9950793B53", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:note3_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "821EAA76-5521-4641-9E68-F1440F7D6AC2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:samsung:note3:-:*:*:*:*:*:*:*", "matchCriteriaId": "58AC3455-40D5-44FC-84F0-0DA2D0A63A09", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:s4_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD536799-788A-4904-829B-95109D132CF8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:samsung:s4:-:*:*:*:*:*:*:*", "matchCriteriaId": "C20551F5-8F11-4DCD-ABF0-5D28959FA33D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:note2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE563AE2-9103-4962-8EFB-1F6EDCF9B77B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:samsung:note2:-:*:*:*:*:*:*:*", "matchCriteriaId": "D1C5054E-5572-45BC-936B-D814ABA68B20", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:s3_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "85895432-4C57-4F13-80EA-60102B8AD972", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:samsung:s3:-:*:*:*:*:*:*:*", "matchCriteriaId": "AB1AABCC-B721-45ED-9902-F10075ED5388", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 (March 2016)."}, {"lang": "es", "value": "Se detect\u00f3 un problema en dispositivos m\u00f3viles Samsung con versiones de software S3(KK), Note2(KK), S4(L), Note3(L) y S5(L). Un atacante puede reescribir el IMEI mediante una sobrescritura de firmware dise\u00f1ada. El ID de Samsung es SVE-2016-5562 (Marzo de 2016)."}], "id": "CVE-2016-11050", "lastModified": "2020-04-08T16:07:13.903", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 0.7, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-04-07T13:15:13.180", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/securityUpdate.smsb"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}