Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-2949
zte
sync_agent
android
2.3.4
hardcoded password
vulnerability
remote attackers
privileges
crafted application
cve-2012-2949
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.4%
The ZTE sync_agent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application.
Affected configurations
Node
googleandroidMatch2.3.4
ztescore_mMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| zte:score_m | zte score m | eq | - |
Related
cvelist
cvelist
CVE-2012-2949
2022-10-03 16:15:36
nvd
nvd
CVE-2012-2949
2012-05-29 19:55:01
prion
prion
Hardcoded credentials
2012-05-29 19:55:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.4%
Related for CVE-2012-2949