Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-28067

A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim, enabling the attacker to send messages to the victim in plaintext.

Published

2024-07-09T18:15:09.790

Last Modified

2024-11-21T09:05:44.517

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Primary
NVD-CWE-noinfo
Type: Secondary
CWE-295

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	samsung	exynos_modem_5300_firmware	-	Yes
Hardware	samsung	exynos_modem_5300	-	No

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/ Vendor Advisory ([email protected])
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-28067/ Vendor Advisory ([email protected])
https://semiconductor.samsung.com/support/quality-support/product-security-updates/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-28067/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)