Firetruck

CVE-2019-16256

KEV

SIMalliance Toolbox Browser Command Injection Vulnerability

View CVE record →
Vendor / Project
SIMalliance
Product
Toolbox Browser
Date added
Nov 3, 2021
Due date
May 3, 2022
Known ransomware use
Unknown
CWEs
—

Description

SIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to retrieve location and IMEI information or execute a range of other attacks by modifying the attack message.

Required action

Apply updates per vendor instructions.

Notes