Lucene search

MitreCVE-2015-8546

HistoryApr 10, 2020 - 7:15 p.m.

CVE-2015-8546

2020-04-1019:15:12

CWE-787

mitre

web.nvd.nist.gov

115

samsung

mobile devices

software

stack-based buffer overflow

baseband process

cve-2015-8546

nvd

vulnerability

sve-2015-5123

shannon333 chipset.

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.001

Percentile

45.4%

JSON

An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Galaxy Note5 with the Shannon333 chipset. There is a stack-based buffer overflow in the baseband process that is exploitable for remote code execution via a fake base station. The Samsung ID is SVE-2015-5123 (December 2015).

Affected configurations

Nvd

Node

googleandroidMatch-

AND

samsunggalaxy_note5Match-

samsunggalaxy_s6Match-

samsunggalaxy_s6_edgeMatch-

samsunggalaxy_s6_edge\+Match-

VendorProductVersionCPE
googleandroid-cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
samsunggalaxy_note5-cpe:2.3:h:samsung:galaxy_note5:-:*:*:*:*:*:*:*
samsunggalaxy_s6-cpe:2.3:h:samsung:galaxy_s6:-:*:*:*:*:*:*:*
samsunggalaxy_s6_edge-cpe:2.3:h:samsung:galaxy_s6_edge:-:*:*:*:*:*:*:*
samsunggalaxy_s6_edge\+-cpe:2.3:h:samsung:galaxy_s6_edge\+:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	-	cpe:2.3:o:google:android:-:::::::*
samsung	galaxy_note5	-	cpe:2.3:h:samsung:galaxy_note5:-:::::::*
samsung	galaxy_s6	-	cpe:2.3:h:samsung:galaxy_s6:-:::::::*
samsung	galaxy_s6_edge	-	cpe:2.3:h:samsung:galaxy_s6_edge:-:::::::*
samsung	galaxy_s6_edge\+	-	cpe:2.3:h:samsung:galaxy_s6_edge\+:-:::::::*

References

security.samsungmobile.com/securityUpdate.smsb

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.001

Percentile

45.4%

JSON

Related for CVE-2015-8546