NVD

Id
19630  
Name
CVE-2016-3888  
Description
internal/telephony/SMSDispatcher.java in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism, and send premium SMS messages during the Setup Wizard provisioning stage, via unspecified vectors, aka internal bug 29420123.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-09-11  
Modified Date
2016-11-28  
Seq
2016-3888  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107688 19630 CVE-2016-3888 http://source.android.com/security/bulletin/2016-09-01.html  View
107689 19630 CVE-2016-3888 92857  View
107690 19630 CVE-2016-3888 https://android.googlesource.com/platform/frameworks/opt/telephony/+/b8d1aee993dcc565e6576b2f2439a8f5a507cff6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3890 JVNDB-2016-004663 Android の internal/telephony/SMSDispatcher.java における Factory Reset Protection 保護メカニズムを回避される脆弱性 Android の internal/telephony/SMSDispatcher.java には、Factory Reset Protection 保護メカニズムを回避され、セットアップウィザードのプロビジョニングの過程でプレミアム SMS メッセージを送信される脆弱性が存在します。 CVE-2016-3888 90394 CVE-2016-3888 19630 2.1 2.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004663.html 2016-09-06 2016-09-14 View