CVE-2015-7888

Опубликовано: 07 июн. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in the name of a file, compressed into a zipped file named cred.zip, and downloaded to /sdcard/Download.

Ссылки

http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html
Third Party Advisory
http://www.securityfocus.com/bid/77338
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1
Issue Tracking
Third Party Advisory
http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html
Third Party Advisory
http://www.securityfocus.com/bid/77338
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:samsung:galaxy_s6_edge_firmware:g925vvru1aoe2:*:*:*:*:*:*:*

cpe:2.3:h:samsung:galaxy_s6_edge:-:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03773

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-rw4p-qwp2-rc5q