CVE-2016-4032

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301.

• CWE-284

• http://www.securityfocus.com/bid/97650Third Party Advisory, VDB Entry
• https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004Exploit, Technical Description, Third Party Advisory
• http://www.securityfocus.com/bid/97650Third Party Advisory, VDB Entry
• https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004Exploit, Technical Description, Third Party Advisory

Published

Apr 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4026An issue was discovered in Open-Xchange OX App Suite before …
• CVE-2016-4027An issue was discovered in Open-Xchange OX App Suite before …
• CVE-2016-4028An issue was discovered in Open-Xchange OX Guard before 2.4.…
• CVE-2016-4029WordPress before 4.5 does not consider octal and hexadecimal…8.6
• CVE-2016-4030Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 b…
• CVE-2016-4031Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 b…
• CVE-2016-4036The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE…
• CVE-2016-4037The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU…6
• CVE-2016-4038Array index error in the msm_sensor_config function in kerne…
• CVE-2016-4040SQL injection vulnerability in the Workflow Screen in dotCMS…
• CVE-2016-4041Plone 4.0 through 5.1a1 does not have security declarations …
• CVE-2016-4042Plone 3.3 through 5.1a1 allows remote attackers to obtain in…