Lucene search

K
cve[email protected]CVE-2012-6334
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-6334

2022-10-0316:15:28
CWE-264
web.nvd.nist.gov
17
cve-2012-6334
samsungdive
android
samsung galaxy
location apis
gps spoofing
security vulnerability
nvd

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

19.0%

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a “commonly available simple GPS location spoofer.”

Affected configurations

NVD
Node
samsungsamsungdiveMatch-
AND
samsunggalaxy_note_2Match-
OR
samsunggalaxy_sMatch-
OR
samsunggalaxy_s2Match-

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

19.0%

Related for CVE-2012-6334