PT-2013-4556 · None Specified But Commonly Associated With Linux+2 · Tcpdump+2
Published
2013-05-29
·
Updated
2013-05-31
·
CVE-2013-3666
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
LG Optimus G E973
Description
The issue allows physically proximate attackers to execute arbitrary commands. This can be achieved by entering USB Debugging mode, using Android Debug Bridge (adb) to establish a USB connection, dialing
3845#*973#, modifying the WLAN Test Wi-Fi Ping Test/User Command tcpdump command string, and pressing the CANCEL button.Recommendations
For LG Optimus G E973, as a temporary workaround, consider disabling the USB Debugging mode to minimize the risk of exploitation. Restrict physical access to the device to prevent attackers from establishing a USB connection. Avoid using the
tcpdump command in the WLAN Test Wi-Fi Ping Test/User Command until the issue is resolved.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android Debug Bridge
Lg Optimus G E973
Tcpdump