VulnerabilityModified
CVE-2013-4764
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.
MEDIUM 4.3EPSS 0.29%
Does this matter?
Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.
Description
Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 0.29% probability · 22th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-276
- Affected
- samsung/galaxy s3 firmware · samsung/galaxy s4 firmware
- Source
- cve@mitre.org
References
- http://shouji.360.cn/securityReportlist/CVE-2013-4764.htmlThird Party Advisory
- https://seclists.org/bugtraq/2013/Jul/107Mailing List, Third Party Advisory
- http://shouji.360.cn/securityReportlist/CVE-2013-4764.htmlThird Party Advisory
- https://seclists.org/bugtraq/2013/Jul/107Mailing List, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.