PT-2012-6154

CVE-2012-5858

·

Publicado

2012-12-03

·

Atualizado

2017-08-29

Descrição por

CVSS 2.0
4.3
Média
MétricasAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Samsung Kies Air versions 2.1.207051 through 2.1.210161
Description The issue allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address, as the software relies on the IP address for authentication.
Recommendations For Samsung Kies Air versions 2.1.207051 through 2.1.210161, consider implementing additional authentication mechanisms to prevent IP address spoofing attacks, such as using secure tokens or credentials. As a temporary workaround, restrict access to the network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾