cve/2016/CVE-2016-4030.md

### [CVE-2016-4030](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4030)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301.

### POC

#### Reference
- https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Beerik994/Codes
- https://github.com/Tomiwa-Ot/SM-A217F_forensics
- https://github.com/apeppels/galaxy-at-tool