Lucene search

K
cveMitreCVE-2024-28067
HistoryJul 09, 2024 - 6:15 p.m.

CVE-2024-28067

2024-07-0918:15:09
mitre
web.nvd.nist.gov
27
samsung exynos modem
man-in-the-middle
security downgrade
plaintext messages

CVSS3

5.3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

16.4%

A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim, enabling the attacker to send messages to the victim in plaintext.

Affected configurations

Nvd
Node
samsungexynos_modem_5300_firmwareMatch-
AND
samsungexynos_modem_5300Match-
VendorProductVersionCPE
samsungexynos_modem_5300_firmware-cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*
samsungexynos_modem_5300-cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*

CVSS3

5.3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

16.4%

Related for CVE-2024-28067