PT-2020-7101 · Google · Android

Published 2020-02-12 · Updated 2020-02-19 · CVE-2011-2343

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to 2.3.6

Description The Bluetooth stack in Android allows a physically proximate attacker to obtain contact information via an AT phonebook transfer. This issue enables an attacker to access sensitive data without authorization.

Recommendations For Android versions prior to 2.3.6, update to version 2.3.6 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-2343

Affected Products

Android

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-2343 · Security Note
• https://deepsec.net/docs/Slides/2013/DeepSec_2013_Jaime_Sanchez_-_Building_The_First_Android_IDS_On_Network_Level.pdf · Note
• https://code.google.com/p/android/issues/detail?id=21347 · Note
• https://t.me/cibsecurity/9802 · Telegram Post
• https://t.me/cvenotify/949 · Telegram Post