Search
Find a vulnerability
Search criteria
3 vulnerabilities found for s55 by siemens
VAR-200412-0758
Vulnerability from variot - Updated: 2025-04-03 22:41GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message. Siemens S55 is a mobile phone.
Siemens S55 has a race condition error when validating SMS messages.
No detailed vulnerability details are provided at this time. Reportedly the Siemens S55 is affected by an SMS confirmation message bypass vulnerability
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200412-0758",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "s55",
"scope": "eq",
"trust": 1.6,
"vendor": "siemens",
"version": "09.2179"
},
{
"model": null,
"scope": null,
"trust": 0.6,
"vendor": "none",
"version": null
},
{
"model": "s55",
"scope": null,
"trust": 0.3,
"vendor": "siemens",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2004-1252"
},
{
"db": "BID",
"id": "10227"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-407"
},
{
"db": "NVD",
"id": "CVE-2004-2626"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "FtR ftr@phenoelit.de\u203bFX\u203b fx@phenoelit.de",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-407"
}
],
"trust": 0.6
},
"cve": "CVE-2004-2626",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 1.9,
"id": "CVE-2004-2626",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 1.0,
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 1.9,
"id": "VHN-11054",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 0.1,
"vectorString": "AV:L/AC:H/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2004-2626",
"trust": 1.0,
"value": "LOW"
},
{
"author": "CNNVD",
"id": "CNNVD-200412-407",
"trust": 0.6,
"value": "LOW"
},
{
"author": "VULHUB",
"id": "VHN-11054",
"trust": 0.1,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-11054"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-407"
},
{
"db": "NVD",
"id": "CVE-2004-2626"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message. Siemens S55 is a mobile phone. \n\n\u00a0Siemens S55 has a race condition error when validating SMS messages. \n\n\u00a0No detailed vulnerability details are provided at this time. Reportedly the Siemens S55 is affected by an SMS confirmation message bypass vulnerability",
"sources": [
{
"db": "NVD",
"id": "CVE-2004-2626"
},
{
"db": "CNVD",
"id": "CNVD-2004-1252"
},
{
"db": "BID",
"id": "10227"
},
{
"db": "VULHUB",
"id": "VHN-11054"
}
],
"trust": 1.8
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-11054",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-11054"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2004-2626",
"trust": 2.3
},
{
"db": "BID",
"id": "10227",
"trust": 2.0
},
{
"db": "OSVDB",
"id": "5703",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1009959",
"trust": 1.7
},
{
"db": "SECUNIA",
"id": "11492",
"trust": 1.7
},
{
"db": "CNNVD",
"id": "CNNVD-200412-407",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2004-1252",
"trust": 0.6
},
{
"db": "XF",
"id": "15995",
"trust": 0.6
},
{
"db": "FULLDISC",
"id": "20040427 PHENOELIT ADVISORY",
"trust": 0.6
},
{
"db": "FULLDISC",
"id": "20040429 RE: PHENOELIT ADVISORY",
"trust": 0.6
},
{
"db": "NSFOCUS",
"id": "6380",
"trust": 0.6
},
{
"db": "EXPLOIT-DB",
"id": "24065",
"trust": 0.1
},
{
"db": "SEEBUG",
"id": "SSVID-77803",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-11054",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2004-1252"
},
{
"db": "VULHUB",
"id": "VHN-11054"
},
{
"db": "BID",
"id": "10227"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-407"
},
{
"db": "NVD",
"id": "CVE-2004-2626"
}
]
},
"id": "VAR-200412-0758",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2004-1252"
},
{
"db": "VULHUB",
"id": "VHN-11054"
}
],
"trust": 0.06999999999999999
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2004-1252"
}
]
},
"last_update_date": "2025-04-03T22:41:51.360000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2004-2626"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/10227"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/5703"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/alerts/2004/apr/1009959.html"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/11492"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15995"
},
{
"trust": 1.0,
"url": "http://marc.info/?l=full-disclosure\u0026m=108325033624812\u0026w=2"
},
{
"trust": 1.0,
"url": "http://marc.info/?l=full-disclosure\u0026m=108308895624565\u0026w=2"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/15995"
},
{
"trust": 0.6,
"url": "http://marc.theaimsgroup.com/?l=full-disclosure\u0026m=108325033624812\u0026w=2"
},
{
"trust": 0.6,
"url": "http://marc.theaimsgroup.com/?l=full-disclosure\u0026m=108308895624565\u0026w=2"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/6380"
},
{
"trust": 0.3,
"url": "http://www.siemens-mobile.com"
},
{
"trust": 0.1,
"url": "http://marc.info/?l=full-disclosure\u0026amp;m=108308895624565\u0026amp;w=2"
},
{
"trust": 0.1,
"url": "http://marc.info/?l=full-disclosure\u0026amp;m=108325033624812\u0026amp;w=2"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-11054"
},
{
"db": "BID",
"id": "10227"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-407"
},
{
"db": "NVD",
"id": "CVE-2004-2626"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2004-1252"
},
{
"db": "VULHUB",
"id": "VHN-11054"
},
{
"db": "BID",
"id": "10227"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-407"
},
{
"db": "NVD",
"id": "CVE-2004-2626"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2004-04-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2004-1252"
},
{
"date": "2004-12-31T00:00:00",
"db": "VULHUB",
"id": "VHN-11054"
},
{
"date": "2004-04-27T00:00:00",
"db": "BID",
"id": "10227"
},
{
"date": "2004-04-27T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200412-407"
},
{
"date": "2004-12-31T05:00:00",
"db": "NVD",
"id": "CVE-2004-2626"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2004-04-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2004-1252"
},
{
"date": "2017-07-20T00:00:00",
"db": "VULHUB",
"id": "VHN-11054"
},
{
"date": "2004-04-27T00:00:00",
"db": "BID",
"id": "10227"
},
{
"date": "2005-12-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200412-407"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2004-2626"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-407"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens S55 mobile phone SMS verification message bypass vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2004-1252"
}
],
"trust": 0.6
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "competitive condition",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-407"
}
],
"trust": 0.6
}
}
CVE-2004-2626 (GCVE-0-2004-2626)
Vulnerability from cvelistv5 – Published: 2005-12-04 22:00 – Updated: 2024-08-08 01:36
VLAI
EPSS
VEX
Summary
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/10227 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/5703 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=full-disclosure&m=10830889562… | mailing-listx_refsource_FULLDISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://marc.info/?l=full-disclosure&m=10832503362… | mailing-listx_refsource_FULLDISC |
| http://securitytracker.com/alerts/2004/Apr/1009959.html | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/11492 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2004-04-27 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:36:24.223Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "10227",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/10227"
},
{
"name": "5703",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/5703"
},
{
"name": "20040427 Phenoelit Advisory \u003cwir-haben-auch-mal-was-gefunden #0815 ++++\u003e",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108308895624565\u0026w=2"
},
{
"name": "siemens-unauth-sms-message(15995)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15995"
},
{
"name": "20040429 Re: Phenoelit Advisory",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108325033624812\u0026w=2"
},
{
"name": "1009959",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/alerts/2004/Apr/1009959.html"
},
{
"name": "11492",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/11492"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-04-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "10227",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/10227"
},
{
"name": "5703",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/5703"
},
{
"name": "20040427 Phenoelit Advisory \u003cwir-haben-auch-mal-was-gefunden #0815 ++++\u003e",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108308895624565\u0026w=2"
},
{
"name": "siemens-unauth-sms-message(15995)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15995"
},
{
"name": "20040429 Re: Phenoelit Advisory",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108325033624812\u0026w=2"
},
{
"name": "1009959",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/alerts/2004/Apr/1009959.html"
},
{
"name": "11492",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/11492"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2626",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "10227",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/10227"
},
{
"name": "5703",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/5703"
},
{
"name": "20040427 Phenoelit Advisory \u003cwir-haben-auch-mal-was-gefunden #0815 ++++\u003e",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=108308895624565\u0026w=2"
},
{
"name": "siemens-unauth-sms-message(15995)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15995"
},
{
"name": "20040429 Re: Phenoelit Advisory",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=108325033624812\u0026w=2"
},
{
"name": "1009959",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/alerts/2004/Apr/1009959.html"
},
{
"name": "11492",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/11492"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2626",
"datePublished": "2005-12-04T22:00:00.000Z",
"dateReserved": "2005-12-04T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:36:24.223Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-2626 (GCVE-0-2004-2626)
Vulnerability from nvd – Published: 2005-12-04 22:00 – Updated: 2024-08-08 01:36
VLAI
EPSS
VEX
Summary
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/10227 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/5703 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=full-disclosure&m=10830889562… | mailing-listx_refsource_FULLDISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://marc.info/?l=full-disclosure&m=10832503362… | mailing-listx_refsource_FULLDISC |
| http://securitytracker.com/alerts/2004/Apr/1009959.html | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/11492 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2004-04-27 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:36:24.223Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "10227",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/10227"
},
{
"name": "5703",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/5703"
},
{
"name": "20040427 Phenoelit Advisory \u003cwir-haben-auch-mal-was-gefunden #0815 ++++\u003e",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108308895624565\u0026w=2"
},
{
"name": "siemens-unauth-sms-message(15995)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15995"
},
{
"name": "20040429 Re: Phenoelit Advisory",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108325033624812\u0026w=2"
},
{
"name": "1009959",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/alerts/2004/Apr/1009959.html"
},
{
"name": "11492",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/11492"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-04-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "10227",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/10227"
},
{
"name": "5703",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/5703"
},
{
"name": "20040427 Phenoelit Advisory \u003cwir-haben-auch-mal-was-gefunden #0815 ++++\u003e",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108308895624565\u0026w=2"
},
{
"name": "siemens-unauth-sms-message(15995)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15995"
},
{
"name": "20040429 Re: Phenoelit Advisory",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=108325033624812\u0026w=2"
},
{
"name": "1009959",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/alerts/2004/Apr/1009959.html"
},
{
"name": "11492",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/11492"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2626",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "10227",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/10227"
},
{
"name": "5703",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/5703"
},
{
"name": "20040427 Phenoelit Advisory \u003cwir-haben-auch-mal-was-gefunden #0815 ++++\u003e",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=108308895624565\u0026w=2"
},
{
"name": "siemens-unauth-sms-message(15995)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15995"
},
{
"name": "20040429 Re: Phenoelit Advisory",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=108325033624812\u0026w=2"
},
{
"name": "1009959",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/alerts/2004/Apr/1009959.html"
},
{
"name": "11492",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/11492"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2626",
"datePublished": "2005-12-04T22:00:00.000Z",
"dateReserved": "2005-12-04T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:36:24.223Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}