CVE-2016-4032 affects several Samsung Galaxy S4, S6, and Note 3 models, allowing attackers to modify Android settings. The vulnerability stems from the devices not blocking specific AT commands (AT+USBDEBUG and AT+WIFIVALUE) when AT access is leveraged. With a CVSS score of 4.6 (Medium), this vulnerability requires physical proximity to the device (AV:P) and can lead to high integrity impact (I:H) without user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
g920fxxu2coh2CPE matchmatch criteria | cpe:2.3:o:samsung:galaxy_s6_firmware:g920fxxu2coh2:*:*:*:*:*:*:* | ||
n9005xxugbob6CPE matchmatch criteria | cpe:2.3:o:samsung:galaxy_note_3_firmware:n9005xxugbob6:*:*:*:*:*:*:* | ||
i9192xxubnb1CPE matchmatch criteria | cpe:2.3:o:samsung:galaxy_s4_mini_firmware:i9192xxubnb1:*:*:*:*:*:*:* | ||
i9195xxucol1CPE matchmatch criteria | cpe:2.3:o:samsung:galaxy_s4_mini_lte_firmware:i9195xxucol1:*:*:*:*:*:*:* | ||
i9505xxuhoj2CPE matchmatch criteria | cpe:2.3:o:samsung:galaxy_s4_firmware:i9505xxuhoj2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.