ZeroHour

CVE-2016-7988

CVSS 3.0
7.5 high
EPSS
<1%p47
Published
()
Modified
Description

On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.[Samsung].android.intent.action.SET_WIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar within the Android Framework, a subset of SVE-2016-6542.

Vendors
google
Products
android
Weakness
CWE-275, CWE-388
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news