CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-09-12
Samsung Mobile Devices SIMalliance Toolbox Browser (S@T Browser) Remote Command Execution and Information Disclosure (CVE-2019-16256, Simjacker)
[Affected Scope] Some Samsung mobile devices utilizing UICC (SIM cards) that include the SIMalliance Toolbox Browser (S@T Browser)
[Impact] Remote attackers can retrieve sensitive location and IMEI information, or execute arbitrary SIM Toolkit (STK) commands via specially crafted SMS messages without user interaction
[Mitigation] Apply the latest carrier and manufacturer OTA firmware updates, and request a replacement SIM card with S@T Browser security filtering enabled