Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-2708
HistoryNov 22, 2017 - 7:29 p.m.

Authentication flaw

2017-11-2219:29:00
PRIOn knowledge base
www.prio-n.com
1

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

The ‘Find Phone’ function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authentication of the ‘Find Phone’ function, an attacker may exploit the vulnerability to bypass the ‘Find Phone’ function in order to use the phone normally.

CPENameOperatorVersion
nice_firmwareeq< nice-al0c0b135

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

Related for PRION:CVE-2017-2708