[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f81mStfdBz-BqpuZ1e-I3qcoCuOLBCZp2CPXhaRpPPPo":3,"g5a-risk:CVE-2019-6741":126},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":50,"epssPercentile":28,"epssTimeSeries":51,"severity":52,"affectedProducts":53,"affectedProductsCount":63,"references":64,"referencesCount":71,"weaknesses":72,"weaknessesCount":71,"isActivelyExploited":81,"cisaInfo":28,"otxData":28,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":122,"notableEvents":123},"CVE-2019-6741","What is CVE-2019-6741?","This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update (SMR-JAN-2019 - SVE-2018-13467). User interaction is required to exploit this vulnerability in that the target must connect to a wireless network. The specific flaw exists within the captive portal. By manipulating HTML, an attacker can force a page redirection. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7476.","This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update (...","2019-06-03T19:29:02.33","2022-10-12T15:09:04.793",9.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":31,"CVSSMetricV2":42,"CVSSMetricV40":28},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","NETWORK","LOW","NONE","REQUIRED","CHANGED","HIGH","CRITICAL",null,2.8,5.8,[32],{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":29,"ImpactScore":41},"zdi-disclosures@trendmicro.com","Secondary",{"Version":36,"VectorString":37,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":38,"ConfidentialityImpact":26,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":39,"BaseSeverity":40,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N","UNCHANGED",6.5,"MEDIUM",3.6,[43],{"Source":17,"Type":18,"CVSSData":44,"BaseSeverity":40,"ExploitabilityScore":48,"ImpactScore":49,"ACInsufInfo":28,"ObtainAllPrivilege":28,"ObtainUserPrivilege":28,"ObtainOtherPrivilege":28,"UserInteractionRequired":4},{"Version":45,"VectorString":46,"AccessVector":21,"AccessComplexity":40,"Authentication":23,"ConfidentialityImpact":47,"IntegrityImpact":47,"AvailabilityImpact":23,"BaseScore":30,"BaseSeverity":28,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",8.6,4.9,0.03225,[50,50,50,50,50,50,50],"Critical",[54,59],{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"samsung","galaxy_s9_firmware","*","cpe:2.3:o:samsung:galaxy_s9_firmware:*:*:*:*:*:*:*:*",{"vendor":55,"product":60,"version":61,"criteria":62,"vulnerable":4},"galaxy_s9","-","cpe:2.3:h:samsung:galaxy_s9:-:*:*:*:*:*:*:*",2,[65],{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-19-254\u002F","Zerodayinitiative",[69,70],"Third Party Advisory","VDB Entry",1,[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-601","URL Redirection to Untrusted Site ('Open Redirect')","A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.","An http parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials. Because the server name in the modified link is identical to the original site, phishing attempts have a more trustworthy appearance. Whether this issue poses a vulnerability will be subject to the intended behavior of the application. For example, a search engine might intentionally provide redirects to arbitrary URLs.","Draft","Base","Simple",false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2019-6741? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-6741, a critical severity cyber security vulnerability from 2019. This vulnerability allows remote attackers to execute ar...","CVE-2019-6741, CVE-2019-6741 vulnerability, CVE-2019-6741 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, samsung security, galaxy_s9_firmware vulnerability, galaxy_s9 vulnerability","\u002Fwhat-is\u002Fcve-2019-6741",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-6741","Cybersecurity","CVE-2019-6741, CVE-2019-6741 vulnerability, CVE-2019-6741 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":110,"Negate":28,"Nodes":111},"AND",[112,118],{"Operator":113,"Negate":28,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":116,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":117,"VersionEndIncluding":28},"DD54D89E-389E-491E-8AEF-3419AEF9DA0A","2019-01",{"Operator":113,"Negate":28,"CPEMatch":119},[120],{"Vulnerable":28,"Criteria":62,"MatchCriteriaID":121,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"3CE4730C-0430-429C-9723-76219B46F092",[],[],{"lastModified":11,"cacheTime":125,"version":45},1792487174046,{"score":127,"band":128,"action":129,"scoredAt":130},54,"Medium","Plan remediation","2026-10-20T06:42:18.490633+00:00"]