CVE-2019-6741

CWE-601 — Open Redirect3 documents3 sources

Severity

9.3CRITICAL

EPSS

0.7%

top 28.64%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Galaxy S9 Firmware Samsung Galaxy S9

Timeline

PublishedJun 3

Latest updateMay 24

Description

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update (SMR-JAN-2019 - SVE-2018-13467). User interaction is required to exploit this vulnerability in that the target must connect to a wireless network. The specific flaw exists within the captive portal. By manipulating HTML, an attacker can force a page redirection. An attacker can leverage this vulnerability to execute code in the context of the…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.8

Affected Packages2 packages

▶NVDsamsung/galaxy_s9_firmware< 2019-01

▶CVEListV5samsung/galaxy_s9prior to January 2019 Security Update (SMR-JAN-2019 - SVE-2018-13467)

🔴Vulnerability Details

GHSA

GHSA-5hx6-qhrr-8vv5: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security U↗2022-05-24

▶

CVEList

CVE-2019-6741: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security U↗2019-06-03

▶