CVE-2012-6422

2012-12-1800:55:04

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

68.9%

JSON

The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.

Affected configurations

Nvd

Node

meizumxMatch-

samsunggalaxy_note_2Match-

samsunggalaxy_s2Match-

VendorProductVersionCPE
meizumx-cpe:2.3:h:meizu:mx:-:*:*:*:*:*:*:*
samsunggalaxy_note_2-cpe:2.3:h:samsung:galaxy_note_2:-:*:*:*:*:*:*:*
samsunggalaxy_s2-cpe:2.3:h:samsung:galaxy_s2:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
meizu	mx	-	cpe:2.3:h:meizu:mx:-:::::::*
samsung	galaxy_note_2	-	cpe:2.3:h:samsung:galaxy_note_2:-:::::::*
samsung	galaxy_s2	-	cpe:2.3:h:samsung:galaxy_s2:-:::::::*