PT-2013-5249 · Google · Google Glass

Publicado 2013-07-18 · Atualizado 2017-08-29 · CVE-2013-4872

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Glass versions prior to XE6

Description The issue allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted QR code symbol. This can be demonstrated by selecting a Wi-Fi access point in order to conduct a man-in-the-middle attack.

Recommendations For Google Glass versions prior to XE6, avoid scanning untrusted QR codes until a patch is available. As a temporary workaround, consider disabling the QR code processing feature to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-4872

Produtos afetados

Google Glass

Referências · 3

• https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4872 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85804 · Nota