PT-2013-5983 · Google · Android

Published 2013-12-14 · Updated 2013-12-18 · CVE-2013-6271

Positive Technologies (AI Summary)

CVSS v2.0

8.8

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Android versions 4.0 through 4.3

Description The issue allows attackers to bypass intended access restrictions and remove device locks via a crafted application. This is achieved by invoking the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD QUALITY UNSPECIFIED option.

Recommendations For Android versions 4.0 through 4.3, as a temporary workaround, consider restricting the use of the com.android.settings.ChooseLockGeneric class until a patch is available. Avoid using the PASSWORD QUALITY UNSPECIFIED option in the updateUnlockMethodAndFinish method to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-6271

Affected Products

Android

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/post/android/manage/remove_lock.rb · Exploit
• 🔥 http://seclists.org/fulldisclosure/2013/Nov/204 · Exploit
• 🔥 https://cureblog.de/2013/11/cve-2013-6271-remove-device-locks-from-android-phone · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-6271 · Security Note
• http://securitytracker.com/id/1029410 · Note
• http://theregister.co.uk/2013/12/10/android_has_lockbypass_bug · Note