What is the CVSS score of CVE-2019-12762?

CVE-2019-12762 has a CVSS 3.1 base score of 4.2 (Medium). CVSS vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.2%.

Galaxy S4 Firmware CVE-2019-12762

MEDIUM

2019-06-06 cve@mitre.org

Information Disclosure Google Samsung Galaxy S4 Firmware Galaxy S6 Edge Firmware Sharp Mi 5S Plus Firmware Xperia Z4 Firmware Nexus 7 Firmware Nexus 9 Firmware Aquos Zeta Sh 04F Firmware Arrows Nx F05 F Firmware Sony Fujitsu Mi

4.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.2 MEDIUM

AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Physical

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Jun 06, 2019 - 20:29 nvd

MEDIUM 4.2

DescriptionNVD

AnalysisAI

Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just beneath the surface. Rated medium severity (CVSS 4.2), this vulnerability is no authentication required. No vendor patch available.

Technical ContextAI

Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just beneath the surface of a coffee-shop table, aka Ghost Touch. Affected products include: Mi Mi 5S Plus Firmware, Sony Xperia Z4 Firmware, Samsung Galaxy S6 Edge Firmware, Samsung Galaxy S4 Firmware, Google Nexus 7 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.