Lucene search
HistoryDec 03, 2012 - 9:55 p.m.
CVE-2012-5858
samsung
kies air
authentication
vulnerability
cve-2012-5858
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.6%
Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address.
Affected configurations
Node
samsungkies_airMatch2.1.207051
ORsamsungkies_airMatch2.1.210161
| CPE | Name | Operator | Version |
|---|---|---|---|
| samsung:kies_air | samsung kies air | eq | 2.1.207051 |
| samsung:kies_air | samsung kies air | eq | 2.1.210161 |
Related
nvd
nvd
CVE-2012-5858
2012-12-03 21:55:02
zdt
zdt
Portable UPnP SDK unique_service_name() Remote Code Execution
2013-02-05 00:00:00
cvelist
cvelist
CVE-2012-5858
2012-12-03 21:00:00
packetstorm
packetstorm
Portable UPnP SDK unique_service_name() Remote Code Execution
2013-02-05 00:00:00
Kies Air Denial Of Service / Authorization Bypass
2012-11-16 00:00:00
prion
prion
Authentication flaw
2012-12-03 21:55:00
securityvulns
securityvulns
Samsung Kies Air security vulnerabilities
2012-11-18 00:00:00
[CVE-2012-5858] [CVE-2012-5859] DoS/Authorization Bypass - Kies Air
2012-11-18 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.6%
Related for CVE-2012-5858