Lucene search
HistoryJul 09, 2024 - 6:15 p.m.
CVE-2024-28067
samsung exynos modem
mitm attack
security downgrade
plaintext messages
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
16.4%
A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim, enabling the attacker to send messages to the victim in plaintext.
Affected configurations
Node
samsungexynos_modem_5300_firmwareMatch-
samsungexynos_modem_5300Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samsung | exynos_modem_5300_firmware | - | cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:* |
| samsung | exynos_modem_5300 | - | cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-28067
2024-07-09 18:15:09
cvelist
cvelist
CVE-2024-28067
2024-07-09 00:00:00
vulnrichment
vulnrichment
CVE-2024-28067
2024-07-09 00:00:00
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
16.4%
Related for NVD:CVE-2024-28067