Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2018-16271
HistoryJan 22, 2020 - 2:15 p.m.

CVE-2018-16271

2020-01-2214:15:11
CWE-269
mitre
web.nvd.nist.gov
30
samsung
galaxy gear
wemail
consumer service
unprivileged process
mailbox manipulation
arbitrary email
security vulnerability
cve-2018-16271
nvd

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

28.6%

JSON

The wemail_consumer_service (from the built-in application wemail) in Samsung Galaxy Gear series allows an unprivileged process to manipulate a user’s mailbox, due to improper D-Bus security policy configurations. An arbitrary email can also be sent from the mailbox via the paired smartphone. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

Affected configurations

Nvd
Node
samsunggalaxy_gear_firmwareRange<re2
AND
samsunggalaxy_gearMatch-
Node
samsunggear_2_firmwareRange<re2
AND
samsunggear_2Match-
Node
samsunggear_live_firmwareRange<re2
AND
samsunggear_liveMatch-
Node
samsunggear_s_firmwareRange<re2
AND
samsunggear_sMatch-
Node
samsunggear_s2_firmwareRange<re2
AND
samsunggear_s2Match-
Node
samsunggear_s3_firmwareRange<re2
AND
samsunggear_s3Match-
Node
samsunggear_sport_firmwareRange<re2
AND
samsunggear_sportMatch-
Node
samsunggear_fit_firmwareRange<re2
AND
samsunggear_fitMatch-
Node
samsunggear_fit_2_firmwareRange<re2
AND
samsunggear_fit_2Match-
Node
samsunggear_fit_2_pro_firmwareRange<re2
AND
samsunggear_fit_2_proMatch-
VendorProductVersionCPE
samsunggalaxy_gear_firmware*cpe:2.3:o:samsung:galaxy_gear_firmware:*:*:*:*:*:*:*:*
samsunggalaxy_gear-cpe:2.3:h:samsung:galaxy_gear:-:*:*:*:*:*:*:*
samsunggear_2_firmware*cpe:2.3:o:samsung:gear_2_firmware:*:*:*:*:*:*:*:*
samsunggear_2-cpe:2.3:h:samsung:gear_2:-:*:*:*:*:*:*:*
samsunggear_live_firmware*cpe:2.3:o:samsung:gear_live_firmware:*:*:*:*:*:*:*:*
samsunggear_live-cpe:2.3:h:samsung:gear_live:-:*:*:*:*:*:*:*
samsunggear_s_firmware*cpe:2.3:o:samsung:gear_s_firmware:*:*:*:*:*:*:*:*
samsunggear_s-cpe:2.3:h:samsung:gear_s:-:*:*:*:*:*:*:*
samsunggear_s2_firmware*cpe:2.3:o:samsung:gear_s2_firmware:*:*:*:*:*:*:*:*
samsunggear_s2-cpe:2.3:h:samsung:gear_s2:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 201

Related

nvd 1
prion 1
cvelist 1
nvd
nvd
CVE-2018-16271
2020-01-22 14:15:11
prion
prion
Design/Logic Flaw
2020-01-22 14:15:00
cvelist
cvelist
CVE-2018-16271
2020-01-22 13:03:26

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

28.6%

JSON
Related for CVE-2018-16271
nvd1prion1cvelist1