VulnerabilityModified
CVE-2004-2626
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message.
LOW 3.7EPSS 3.42%
Does this matter?
Lower severity and a low EPSS score (3.42%). Track it; it rarely justifies an emergency change on its own.
Description
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message.
- CVSS 2.0
- 3.7 LOWAV:L/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 3.42% probability · 88th percentile
- CISA KEV
- Not listed
- Affected
- siemens/s55
- Source
- cve@mitre.org
References
- http://marc.info/?l=full-disclosure&m=108308895624565&w=2
- http://marc.info/?l=full-disclosure&m=108325033624812&w=2
- http://secunia.com/advisories/11492Vendor Advisory
- http://securitytracker.com/alerts/2004/Apr/1009959.html
- http://www.osvdb.org/5703
- http://www.securityfocus.com/bid/10227Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15995
- http://marc.info/?l=full-disclosure&m=108308895624565&w=2
- http://marc.info/?l=full-disclosure&m=108325033624812&w=2
- http://secunia.com/advisories/11492Vendor Advisory
- http://securitytracker.com/alerts/2004/Apr/1009959.html
- http://www.osvdb.org/5703
- http://www.securityfocus.com/bid/10227Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15995
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.