CVE-2015-9546

An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16

published April 10, 2020

CVSS
—
EPSS
0%
Percentile
26.0
In the wild
Unconfirmed
What it is

An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16. In some cases, HTTP is used for an Inputmethod, rather than HTTPS. A man-in-the-middle attacker can modify the client-server data stream to insert directory traversal sequences into an extracted file path. The Samsung ID is SVE-2015-4363 (November 2015).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.0th percentile
Published
2020-04-10T18:54Z
EPSS history
Timeline
  • 10 APR 18:54Z
    An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16
    cvelistv5