CVE-2015-7888 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in the name of a file, compressed into a zipped file named cred.zip, and downloaded to /sdcard/Download.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Samsung	Galaxy S6 Edge Firmware	g925vvru1aoe2
Samsung	Galaxy S6 Edge	-

Related Weaknesses (CWE)

CWE-22

References

http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Third Party Advisory
http://www.securityfocus.com/bid/77338Third Party AdvisoryVDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1Issue TrackingThird Party Advisory
http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Third Party Advisory
http://www.securityfocus.com/bid/77338Third Party AdvisoryVDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1Issue TrackingThird Party Advisory

FAQ

What is CVE-2015-7888?

CVE-2015-7888 is a vulnerability with a CVSS score of 7.5 (HIGH). Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via ...

How severe is CVE-2015-7888?

CVE-2015-7888 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-7888?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Galaxy S6 Edge Firmware, Samsung Galaxy S6 Edge.