CVE-2016-4030

Tool to expose and interact with the AT modem om Samsung Galaxy devices

galaxy-at-tool Tool to expose the AT modem on Samsung Galaxy devices and interact with it It works over USB connections in MTP mode with factory settings Requirements This script depends on libusb and pyserial, these can be installed with: pip install pyusb pyserial Usage: python galaxy_at_toolpy By default, the script dumps the following information Network identity IMSI,

SM-A217F (carrier unlocked) AT Commands Enable 3GPP in developer options However, it was discovered that an attacker can still access the modem by switching to a secondary USB configuration even when both USB tethering and USB debugging (ie ADB) are disabled and when the device is locked Samsung devices exposes MTP as USB configuration 1 and CDC ACM modem (for AT commands)

Samsung modem commands over USB serial connection and secret dialer codes extracted from system packages

SM-A217F (carrier unlocked) AT Commands Enable 3GPP in developer options However, it was discovered that an attacker can still access the modem by switching to a secondary USB configuration even when both USB tethering and USB debugging (ie ADB) are disabled and when the device is locked Samsung devices exposes MTP as USB configuration 1 and CDC ACM modem (for AT commands)