CVE-2019-16256

CRITICALCISA KEV

9.8

Descricao

Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado9/12/2019

Ultima modificacao11/12/2025

Fontekev

Avistamentos honeypot0

CISA KEV

FornecedorSIMalliance

ProdutoToolbox Browser

Nome da vulnerabilidadeSIMalliance Toolbox Browser Command Injection Vulnerability

Data inclusao KEV2021-11-03

Prazo de remediacao2022-05-03

Uso em ransomwareUnknown

Produtos afetados

trustedconnectivityalliance:s\@t_browser

Referencias

https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile(cve@mitre.org)

https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16256(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.