CVE-2019-16256

SIMalliance Toolbox Browser Command Injection Vulnerability

S\@T Browser

Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.

12. Sep 2019

Ausgewertete Quellen

• Hinweis
  https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16256
• CISA
  SIMalliance Toolbox Browser Command Injection Vulnerability
• NVD
  CVE-2019-16256