Lucene search
K

CVE-2013-6775

🗓️ 30 Mar 2014 10:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 38 Views🌐 WEB

Chainfire SuperSU package v1.69 for Android allows privilege escalation via shell metacharacters in -c option to /system/xbin/s

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2013-6775
30 Mar 201410:00
cvelist
EUVD
EUVD-2013-6577
7 Oct 202500:30
euvd
NVD
CVE-2013-6775
31 Mar 201414:58
nvd
Packet Storm
Android 4.2.x Superuser Shell Character Escape
14 Nov 201300:00
packetstorm
Prion
Code injection
31 Mar 201414:58
prion
securityvulns
Android Superuser shell character escape vulnerability
18 Nov 201300:00
securityvulns
securityvulns
Android su applications privilege escalation
18 Nov 201300:00
securityvulns
NVD
Node
chainfiresupersuMatch1.69android
AND
OROROROROR
googleandroidMatch2.0.1
OROROR
googleandroidMatch2.2rev1
OR
googleandroidMatch2.2.1
OR
googleandroidMatch2.2.2
OR
googleandroidMatch2.2.3
OROR
googleandroidMatch2.3rev1
OR
googleandroidMatch2.3.1
OR
googleandroidMatch2.3.2
OR
googleandroidMatch2.3.3
OR
googleandroidMatch2.3.4
OR
googleandroidMatch2.3.5
OR
googleandroidMatch2.3.6
OR
googleandroidMatch2.3.7
OROROROR
googleandroidMatch3.2.1
OR
googleandroidMatch3.2.2
OR
googleandroidMatch3.2.4
OR
googleandroidMatch3.2.6
OROR
googleandroidMatch4.0.1
OR
googleandroidMatch4.0.2
OR
googleandroidMatch4.0.3
OR
googleandroidMatch4.0.4
OROR
googleandroidMatch4.1.2
OROR
googleandroidMatch4.2.1
OR
googleandroidMatch4.2.2
ParameterPositionPathDescriptionCWE
-cpath/system/xbin/suPrivilege escalation through shell metacharacters in su -c invocation (backticks or $()) allowing root command executionCWE-264
--inputpath/system/xbin/suPrivilege escalation through shell metacharacters in su -c invocation (backticks or $()) allowing root command executionCWE-264
commandpath/system/xbin/suPrivilege escalation through shell metacharacters in su -c invocation (backticks or $()) allowing root command executionCWE-264
command line argumentspath/system/bin/amam is invoked with user-controlled arguments that can be exploited to execute arbitrary commands when processing the su decision outputCWE-264
ACTION_RESULTpath/system/bin/amam is invoked with user-controlled arguments that can be exploited to execute arbitrary commands when processing the su decision outputCWE-264
--eipath/system/bin/amam is invoked with user-controlled arguments that can be exploited to execute arbitrary commands when processing the su decision outputCWE-264
binary_versionpath/system/bin/amam is invoked with user-controlled arguments that can be exploited to execute arbitrary commands when processing the su decision outputCWE-264
--espath/system/bin/amam is invoked with user-controlled arguments that can be exploited to execute arbitrary commands when processing the su decision outputCWE-264
desired_namepath/system/bin/amam is invoked with user-controlled arguments that can be exploited to execute arbitrary commands when processing the su decision outputCWE-264
--eipath/system/bin/amam is invoked with user-controlled arguments that can be exploited to execute arbitrary commands when processing the su decision outputCWE-264
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:00Current
6.9Medium risk
Vulners AI Score6.9
CVSS 210
EPSS0.01574
38