CVE-2019-16256

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 4,9%

Kerentanan pada trustedconnectivityalliance s@t browser. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 3 November 2021, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.

Rincian

Terbit di NVD

12 September 2019

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

4,9% peluang dieksploitasi; lebih tinggi dari 91,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

SIMalliance Toolbox Browser Command Injection Vulnerability

Masuk KEV

3 November 2021

Tenggat CISA

3 Mei 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16256 pemerintah AS
• https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile exploit · advisory pihak ketiga