Summaryinfo

A vulnerability was found in Samsung Galaxy S9 and classified as critical. Affected by this issue is some unknown functionality of the component Captive Portal. The manipulation leads to redirect. This vulnerability is handled as CVE-2019-6741. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Detailsinfo

A vulnerability has been found in Samsung Galaxy S9 (Smartphone Operating System) (the affected version is unknown) and classified as critical. Affected by this vulnerability is an unknown code of the component Captive Portal. The manipulation with an unknown input leads to a redirect vulnerability. The CWE definition for the vulnerability is CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update (SMR-JAN-2019 - SVE-2018-13467). User interaction is required to exploit this vulnerability in that the target must connect to a wireless network. The specific flaw exists within the captive portal. By manipulating HTML, an attacker can force a page redirection. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7476.

The bug was discovered 03/05/2019. The weakness was published 06/03/2019. This vulnerability is known as CVE-2019-6741 since 01/24/2019. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1204.001 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 90 days. During that time the estimated underground price was around $0-$5k.

Applying the patch SMR-JAN-2019 - SVE-2018-13467 is able to eliminate this problem.

Similar entries are available at VDB-135896 and VDB-135894. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Samsung

Name

• Galaxy S9

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion