« Volver al listado

CVE-2012-6337

Estado: ModificadaBaja (3.3)—

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Samsung — Samsungdive

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-6337",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.3,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-31T11:50:28.237",
  "references": [
    {
      "url": "http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data."
    },
    {
      "lang": "es",
      "value": "La funcionalidad Track My Mobile en el subsistema SamsungDive para Android en dispositivos Samsung Galaxy muestra la activación de seguimiento a distancia, lo que podría permitir a los atacantes físicamente próximos a vencer a un esfuerzo de recuperación de producto mediante la manipulación de esta función o sus datos de localización."
    }
  ],
  "lastModified": "2026-06-16T23:48:01.247",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:samsung:samsungdive:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A2FC077-4D6C-4342-9B7F-FE2AC47F736A"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_note_2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C11A19CD-FAFE-45ED-A24C-72642C3ED565"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A60CAD7B-6A6C-4627-B999-AA442F210486"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_s2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "27B05798-6E5E-4DCD-810E-680DEB3BDE97"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}