Unscored CVE-2018-16270 EUVD-2018-8122GHSA-fwf5-32xc-rx62

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unpriv…

Published Jan 22, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Description

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.

References

https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf
https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be