CVE-2018-16270 affects Samsung Galaxy Gear series devices before build RE2, where the hcidump utility lacks proper privilege restrictions. This allows an unprivileged process to write Bluetooth HCI packet dumps to any file path. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-exploitable flaw with high impact on integrity, though it does not affect confidentiality or availability. There is no known exploit code available in Metasploit, Nuclei, or ExploitDB, and it is not listed in CISA's KEV catalog. Community discussion and media coverage are minimal, suggesting low public awareness and no active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< re2CPE matchmatch criteria | cpe:2.3:o:samsung:galaxy_gear_firmware:*:*:*:*:*:*:*:* | ||
< re2CPE matchmatch criteria | cpe:2.3:o:samsung:gear_2_firmware:*:*:*:*:*:*:*:* | ||
< re2CPE matchmatch criteria | cpe:2.3:o:samsung:gear_live_firmware:*:*:*:*:*:*:*:* | ||
< re2CPE matchmatch criteria | cpe:2.3:o:samsung:gear_s_firmware:*:*:*:*:*:*:*:* | ||
< re2CPE matchmatch criteria | cpe:2.3:o:samsung:gear_s2_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.