{"id":"CVE-2019-11341","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-11341","generatedAt":"2026-10-29T02:13:41.180Z","title":"On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture without the user's knowledge.","description":"On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture without the user's knowledge. This feature of the Service Mode application is available after entering the *#9900# check code, but is protected by an OTP password. However, this password is created locally and (due to mishandling of cryptography) can be obtained easily by reversing the password creation logic.","published":"2019-10-09T16:15:14.000Z","lastModified":"2026-06-17T02:12:45.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":4.6,"severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-327"],"affected":["google/android"],"epss":{"score":0.00164,"percentile":0.05594,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://drfone.wondershare.com/unlock/samsung-galaxy-secret-code-list.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://security.samsungmobile.com/securityUpdate.smsb","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"https://twitter.com/fs0c131y/status/1115889065285562368","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://drfone.wondershare.com/unlock/samsung-galaxy-secret-code-list.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.samsungmobile.com/securityUpdate.smsb","tags":["Not Applicable"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://twitter.com/fs0c131y/status/1115889065285562368","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-11341","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}