CVE-2016-1919

Severity
4.7MEDIUM
EPSS
0.1%
top 79.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 27
Latest updateMay 14

Description

Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.0 | Impact: 3.6

Affected Packages1 packages

NVDsamsung/knox1.0

🔴Vulnerability Details

2
GHSA
GHSA-xjjc-8jjh-rwv3: Samsung KNOX 12022-05-14
CVEList
CVE-2016-1919: Samsung KNOX 12017-01-27
CVE-2016-1919 (MEDIUM CVSS 4.7) | Samsung KNOX 1.0 uses a weak eCrypt | cvebase.io