PT-2013-4556 · None Specified But Commonly Associated With Linux+2 · Tcpdump+2

Publicado

2013-05-29

·

Atualizado

2013-05-31

·

CVE-2013-3666

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions LG Optimus G E973
Description The issue allows physically proximate attackers to execute arbitrary commands. This can be achieved by entering USB Debugging mode, using Android Debug Bridge (adb) to establish a USB connection, dialing 3845#*973#, modifying the WLAN Test Wi-Fi Ping Test/User Command tcpdump command string, and pressing the CANCEL button.
Recommendations For LG Optimus G E973, as a temporary workaround, consider disabling the USB Debugging mode to minimize the risk of exploitation. Restrict physical access to the device to prevent attackers from establishing a USB connection. Avoid using the tcpdump command in the WLAN Test Wi-Fi Ping Test/User Command until the issue is resolved.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2013-3666

Produtos afetados

Android Debug Bridge
Lg Optimus G E973
Tcpdump