CVE-2016-9966
CriticalSummary
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to easily crash the system, potentially leading to a DoS attack or gaining privileges.
Risk Assessment
The organization may be exposed to DoS attacks, resulting in system downtime and the potential for attackers to gain unauthorized privileges.
Recommendation
It is recommended to update the Samsung Note devices to the latest software version to patch this vulnerability and implement system monitoring to detect unauthorized activities.
Original NVD description (English source)
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7120.