« Volver al listado

CVE-2012-6334

Estado: ModificadaBaja (2.9)—

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Samsung — Samsungdive

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-6334",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.9,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-31T11:50:28.047",
  "references": [
    {
      "url": "http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a \"commonly available simple GPS location spoofer.\""
    },
    {
      "lang": "es",
      "value": "La función \"Track My Mobile\" en el subsistema SamsungDive para Android en los dispositivos Samsung Galaxy no implementa correctamente  las APIs de localización, lo que permite a atacantes físicamente próximos proporcionar datos de localización de su elección a través de un \"sencillo spoofer de localización GPS comúnmente disponible.\"\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:48:00.913",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:samsung:samsungdive:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A2FC077-4D6C-4342-9B7F-FE2AC47F736A"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_note_2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C11A19CD-FAFE-45ED-A24C-72642C3ED565"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A60CAD7B-6A6C-4627-B999-AA442F210486"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_s2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "27B05798-6E5E-4DCD-810E-680DEB3BDE97"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}