What’s Vulnerable › Vulnerabilities

CVE-2024-28067

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-09 · updated 2026-06-17
• Weakness: CWE-295

Description

A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim, enabling the attacker to send messages to the victim in plaintext.

Affected products

• Samsung Exynos Modem 5300 Firmware: all versions

References

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-28067/
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/
• https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-28067/

Get alerted when CVE-2024-28067 or the next vulnerability affects your stack