CVE-2019-11341

On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture without the user's knowledge. This feature of the Service Mode application is available after entering the *#9900# check code, but is protected by an OTP password. However, this password is created locally and (due to mishandling of cryptography) can be obtained easily by reversing the password creation logic.

• CWE-327

• https://drfone.wondershare.com/unlock/samsung-galaxy-secret-code-list.htmlThird Party Advisory
• https://security.samsungmobile.com/securityUpdate.smsbNot Applicable
• https://twitter.com/fs0c131y/status/1115889065285562368Exploit, Third Party Advisory
• https://drfone.wondershare.com/unlock/samsung-galaxy-secret-code-list.htmlThird Party Advisory
• https://security.samsungmobile.com/securityUpdate.smsbNot Applicable
• https://twitter.com/fs0c131y/status/1115889065285562368Exploit, Third Party Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11334An authentication bypass in website post requests in the Tzu…3.7
• CVE-2019-11336Sony Bravia Smart TV devices allow remote attackers to retri…
• CVE-2019-11338libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles dete…8.8
• CVE-2019-11339The studio profile decoder in libavcodec/mpeg4videodec.c in …
• CVE-2019-1134A cross-site-scripting (XSS) vulnerability exists when Micro…5.4
• CVE-2019-11340util/emailutils.py in Matrix Sydent before 1.0.2 mishandles …
• CVE-2019-11343Torpedo Query before 2.5.3 mishandles the LIKE operator in C…9.8
• CVE-2019-11344data/inc/files.php in Pluck 4.7.8 allows remote attackers to…
• CVE-2019-11345Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-W…6.1
• CVE-2019-1135Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-11350CloudBees Jenkins Operations Center 2.150.2.3, when an expir…
• CVE-2019-11351TeamSpeak 3 Client before 3.2.5 allows remote code execution…