CVE-2016-11050
Status: ModifiedMedium (4.3)—
An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 (March 2016).
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- Base score: 4.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.28%
- Percentile among all scored CVEs: 19
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (5)
CWEs
- NVD-CWE-noinfo
References
Raw JSON (NVD)
Show
{
"id": "CVE-2016-11050",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.3,
"attackVector": "PHYSICAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 0.7
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2020-04-07T13:15:13.180",
"references": [
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 (March 2016)."
},
{
"lang": "es",
"value": "Se detectó un problema en dispositivos móviles Samsung con versiones de software S3(KK), Note2(KK), S4(L), Note3(L) y S5(L). Un atacante puede reescribir el IMEI mediante una sobrescritura de firmware diseñada. El ID de Samsung es SVE-2016-5562 (Marzo de 2016)."
}
],
"lastModified": "2026-06-17T00:40:53.923",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:s5_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6A781FA-6701-41A9-85AB-D27D848B9013"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:s5:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E64786A2-BCFD-4FF9-BBD3-7C9950793B53"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:note3_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "821EAA76-5521-4641-9E68-F1440F7D6AC2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:note3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "58AC3455-40D5-44FC-84F0-0DA2D0A63A09"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:s4_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD536799-788A-4904-829B-95109D132CF8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:s4:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C20551F5-8F11-4DCD-ABF0-5D28959FA33D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:note2_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE563AE2-9103-4962-8EFB-1F6EDCF9B77B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:note2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D1C5054E-5572-45BC-936B-D814ABA68B20"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:s3_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85895432-4C57-4F13-80EA-60102B8AD972"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:s3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AB1AABCC-B721-45ED-9902-F10075ED5388"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}