VULNERABILITY INTELLIGENCE

CVE-2019-16257

CVSS score9.8 CRITICAL
EPSS probability2.10%
CISA KEVNot currently listed
Published2019-09-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Some Motorola devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references