CVE-2019-16256 - Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker

Back Back to CVE browser

CRITICAL KEV

Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker

Published Sep 12, 2019 ·Due May 3, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 4.95%

Description

Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile
x_refsource_MISCExploitThird Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16256
government-resourceUS Government Resource

Link	Providers	Tags
https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile		x_refsource_MISCExploitThird Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16256		government-resourceUS Government Resource