ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-16270

PoC ×2—
CVSS 3.1
7.5 high
EPSS
1%p65
Published
()
Modified
Description

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.

Vendors
samsung
Products
galaxy gear firmware, gear 2 firmware, gear live firmware, gear s firmware, gear s2 firmware, gear s3 firmware, gear sport firmware, gear fit firmware, gear fit 2 firmware, gear fit 2 pro firmware
Weakness
CWE-269
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

No ingested article mentions this CVE yet.