CVE-2018-16270
HIGHCVSS 7.5/10EPSS 1.16%
Last modified
CVE-2018-16270 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.. EPSS estimates a 1.16% chance of exploitation in the next 30 days.
Description
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Galaxy Gear Firmware | < re2 |
| Samsung | Gear 2 Firmware | < re2 |
| Samsung | Gear Live Firmware | < re2 |
| Samsung | Gear S Firmware | < re2 |
| Samsung | Gear S2 Firmware | < re2 |
| Samsung | Gear S3 Firmware | < re2 |
| Samsung | Gear Sport Firmware | < re2 |
| Samsung | Gear Fit Firmware | < re2 |
| Samsung | Gear Fit 2 Firmware | < re2 |
| Samsung | Gear Fit 2 Pro Firmware | < re2 |
References
- https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.beExploit, Third Party Advisory
- https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.beExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-16270?
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.
How severe is CVE-2018-16270?
CVE-2018-16270 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 1.16% probability of exploitation in the next 30 days.
How do I fix CVE-2018-16270?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-16264The BlueZ system service in Tizen allows an unprivileged pro…6.5
- CVE-2018-16265The bt/bt_core system service in Tizen allows an unprivilege…6.5
- CVE-2018-16266The Enlightenment system service in Tizen allows an unprivil…8.1
- CVE-2018-16267The system-popup system service in Tizen allows an unprivile…8.1
- CVE-2018-16268The SoundServer/FocusServer system services in Tizen allow a…4.3
- CVE-2018-16269The wnoti system service in Samsung Galaxy Gear series allow…7.5
- CVE-2018-16271The wemail_consumer_service (from the built-in application w…6.5
- CVE-2018-16272The wpa_supplicant system service in Samsung Galaxy Gear ser…9.8
- CVE-2018-16275OPSWAT MetaDefender before v4.11.2 allows CSV injection.
- CVE-2018-16276An issue was discovered in yurex_read in drivers/usb/misc/yu…7.8
- CVE-2018-16277The Image Import function in XWiki through 10.7 has XSS.
- CVE-2018-16278phpkaiyuancms PhpOpenSourceCMS (POSCMS) V3.2.0 allows an una…
Are you affected by CVE-2018-16270?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST