6.8
MEDIUM
CVE-2016-4030
Samsung Galaxy S6, Note 3, S4 mini, and S4 Modem Lockscreen Exploit
Description

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301.

INFO

Published Date :

April 13, 2017, 4:59 p.m.

Last Modified :

April 25, 2017, 3:46 p.m.

Remotely Exploitable :

No

Impact Score :

5.9

Exploitability Score :

0.9
Public PoC/Exploit Available at Github

CVE-2016-4030 has a 3 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2016-4030 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Samsung galaxy_s6_firmware
2 Samsung galaxy_s4_firmware
3 Samsung galaxy_note_3_firmware
4 Samsung galaxy_s4_mini_firmware
5 Samsung galaxy_s4_mini_lte_firmware
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2016-4030.

URL Resource
http://www.securityfocus.com/bid/97701 Third Party Advisory VDB Entry
https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004 Exploit Technical Description Third Party Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

None

Python

Updated: 10 months ago
0 stars 0 fork 0 watcher
Born at : Jan. 12, 2024, 4:08 p.m. This repo has been linked 3 different CVEs too.

Samsung modem commands over USB serial connection and secret dialer codes extracted from system packages

python pyserial 3gpp sm-a217f samsung android forensics modem serial-communication usb-serial

Python

Updated: 2 months, 2 weeks ago
39 stars 7 fork 7 watcher
Born at : Sept. 13, 2021, 5:32 p.m. This repo has been linked 3 different CVEs too.

Tool to expose and interact with the AT modem om Samsung Galaxy devices

Python

Updated: 2 months, 2 weeks ago
32 stars 9 fork 9 watcher
Born at : March 9, 2019, 11:50 p.m. This repo has been linked 1 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2016-4030 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2016-4030 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Initial Analysis by [email protected]

    Apr. 25, 2017

    Action Type Old Value New Value
    Added CVSS V2 (AV:L/AC:L/Au:N/C:P/I:P/A:P)
    Added CVSS V3 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type http://www.securityfocus.com/bid/97701 No Types Assigned http://www.securityfocus.com/bid/97701 Third Party Advisory, VDB Entry
    Changed Reference Type https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004 No Types Assigned https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004 Exploit, Technical Description, Third Party Advisory
    Added CWE CWE-284
    Added CPE Configuration AND OR *cpe:2.3:o:samsung:galaxy_s6_firmware:g920fxxu2coh2:*:*:*:*:*:*:* OR cpe:2.3:h:samsung:galaxy_s6:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:samsung:galaxy_note_3_firmware:n9005xxugbob6:*:*:*:*:*:*:* OR cpe:2.3:h:samsung:galaxy_note_3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:samsung:galaxy_s4_mini_firmware:i9192xxubnb1:*:*:*:*:*:*:* OR cpe:2.3:h:samsung:galaxy_s4_mini:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:samsung:galaxy_s4_mini_lte_firmware:i9195xxucol1:*:*:*:*:*:*:* OR cpe:2.3:h:samsung:galaxy_s4_mini_lte:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:samsung:galaxy_s4_firmware:i9505xxuhoj2:*:*:*:*:*:*:* OR cpe:2.3:h:samsung:galaxy_s4:-:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Apr. 19, 2017

    Action Type Old Value New Value
    Added Reference http://www.securityfocus.com/bid/97701 [No Types Assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2016-4030 is associated with the following CWEs:

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.21 }} 0.00%

score

0.57371

percentile

CVSS30 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability