Lucene search

MitreCVE-2013-3666

HistoryMay 29, 2013 - 2:29 p.m.

CVE-2013-3666

2013-05-2914:29:09

CWE-264

mitre

web.nvd.nist.gov

lg optimus g

android

arbitrary command execution

security vulnerability

cve-2013-3666

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

34.2%

JSON

The LG Hidden Menu component for Android on the LG Optimus G E973 allows physically proximate attackers to execute arbitrary commands by entering USB Debugging mode, using Android Debug Bridge (adb) to establish a USB connection, dialing 3845#*973#, modifying the WLAN Test Wi-Fi Ping Test/User Command tcpdump command string, and pressing the CANCEL button.

Affected configurations

Nvd

Node

googleandroidMatch4.1.2

AND

lgoptimus_g_e973Match-

VendorProductVersionCPE
googleandroid4.1.2cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*
lgoptimus_g_e973-cpe:2.3:h:lg:optimus_g_e973:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	4.1.2	cpe:2.3:o:google:android:4.1.2:::::::*
lg	optimus_g_e973	-	cpe:2.3:h:lg:optimus_g_e973:-:::::::*

References

seclists.org/fulldisclosure/2013/May/166

www.youtube.com/watch?v=ZfbDIpTY-t4

plus.google.com/110348415484169880343/posts/9KxBtkyuYcj

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

34.2%

JSON

Related for CVE-2013-3666