PT-2013-5249 · Google · Google Glass

Published 2013-07-18 · Updated 2017-08-29 · CVE-2013-4872

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Glass versions prior to XE6

Description The issue allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted QR code symbol. This can be demonstrated by selecting a Wi-Fi access point in order to conduct a man-in-the-middle attack.

Recommendations For Google Glass versions prior to XE6, avoid scanning untrusted QR codes until a patch is available. As a temporary workaround, consider disabling the QR code processing feature to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-4872

Affected Products

Google Glass

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4872 · Security Note
• https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85804 · Note