CVE-2015-9546: Path Traversal

Published Apr 10, 2020

Updated

An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16. In some cases, HTTP is used for an Inputmethod, rather than HTTPS. A man-in-the-middle attacker can modify the client-server data stream to insert directory traversal sequences into an extracted file path. The Samsung ID is SVE-2015-4363 (November 2015).

Affected Software

1 affected component

Google Android=4.4

Event History

Apr 10, 2020

CVE Published

via MITRE·06:54 PM

Data Sourced

via MITRE·06:54 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-9546?

The severity of CVE-2015-9546 is classified as high due to the potential for man-in-the-middle attacks.

How do I fix CVE-2015-9546?

To fix CVE-2015-9546, users should update their Samsung mobile devices to the latest software version that addresses this vulnerability.

What devices are affected by CVE-2015-9546?

CVE-2015-9546 affects Samsung mobile devices running Android version 4.4 and later, up to June 16, 2015.

What kind of attacks can CVE-2015-9546 facilitate?

CVE-2015-9546 can facilitate man-in-the-middle attacks, allowing attackers to manipulate client-server communications.

Is CVE-2015-9546 specific to Samsung devices?

Yes, CVE-2015-9546 is specifically related to vulnerabilities found in Samsung mobile devices.