CVE-2018-16270

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction

published January 22, 2020

CVSS
—
EPSS
1%
Percentile
66.8
In the wild
Unconfirmed
What it is

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01158 · 66.8th percentile
Published
2020-01-22T13:01Z
EPSS history
Timeline
  • 22 JAN 13:01Z
    Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction
    cvelistv5