Lucene search

MitreCVE-2015-4640

HistoryJun 19, 2015 - 2:59 p.m.

CVE-2015-4640

2015-06-1914:59:01

CWE-254

mitre

web.nvd.nist.gov

samsung galaxy

swiftkey

man-in-the-middle

cve-2015-4640

code execution

CVSS2

2.9

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.006

Percentile

79.3%

JSON

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitation can be combined with CVE-2015-4641 exploitation for man-in-the-middle code execution.

Affected configurations

Nvd

Node

swiftkeyswiftkey_sdk

AND

samsunggalaxy_s4

samsunggalaxy_s4_mini

samsunggalaxy_s5

samsunggalaxy_s6

VendorProductVersionCPE
swiftkeyswiftkey_sdkcpe:/a:swiftkey:swiftkey_sdk::::

Vendor	Product	Version	CPE
swiftkey	swiftkey_sdk		cpe:/a:swiftkey:swiftkey_sdk::::

References

arstechnica.com/security/2015/06/new-exploit-turns-samsung-galaxy-phones-into-remote-bugging-devices/

www.kb.cert.org/vuls/id/155412

www.securityfocus.com/bid/75347

github.com/nowsecure/samsung-ime-rce-poc/

www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/

www.nowsecure.com/keyboard-vulnerability/

CVSS2

2.9

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.006

Percentile

79.3%

JSON

Related for CVE-2015-4640