CVE-2019-11341

Severity: medium (CVSS 4.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-10-09 · updated 2026-06-17
Weakness: CWE-327

Description

On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture without the user's knowledge. This feature of the Service Mode application is available after entering the *#9900# check code, but is protected by an OTP password. However, this password is created locally and (due to mishandling of cryptography) can be obtained easily by reversing the password creation logic.

Affected products

Android: 9.0

References

https://drfone.wondershare.com/unlock/samsung-galaxy-secret-code-list.html
https://security.samsungmobile.com/securityUpdate.smsb
https://twitter.com/fs0c131y/status/1115889065285562368
https://drfone.wondershare.com/unlock/samsung-galaxy-secret-code-list.html
https://security.samsungmobile.com/securityUpdate.smsb
https://twitter.com/fs0c131y/status/1115889065285562368

Get alerted when CVE-2019-11341 or the next vulnerability affects your stack