CVE-2017-10709

Опубликовано: 30 июн. 2017

Источник: nvd

CVSS3: 6.8

CVSS2: 7.2

EPSS Низкий

Описание

The lockscreen on Elephone P9000 devices (running Android 6.0) allows physically proximate attackers to bypass a wrong-PIN lockout feature by pressing backspace after each PIN guess.

Ссылки

https://www.reddit.com/r/netsec/comments/6kajkc/elephone_p9000_lock_screen_lockout_bypass_with/
Press/Media Coverage
Third Party Advisory
https://www.security.nl/posting/522081/Schermvergrendeling+Elephone+P9000+door+lek+te+omzeilen
Third Party Advisory
https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-011/?fid=9707
Third Party Advisory
https://www.trustwave.com/Resources/SpiderLabs-Blog/Elephone-P9000-Lock-Screen-Lockout-Bypass/?page=1&year=0&month=0
Third Party Advisory
https://www.youtube.com/watch?v=dwyzonP2eZw
Press/Media Coverage
Third Party Advisory
https://www.reddit.com/r/netsec/comments/6kajkc/elephone_p9000_lock_screen_lockout_bypass_with/
Press/Media Coverage
Third Party Advisory
https://www.security.nl/posting/522081/Schermvergrendeling+Elephone+P9000+door+lek+te+omzeilen
Third Party Advisory
https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-011/?fid=9707
Third Party Advisory
https://www.trustwave.com/Resources/SpiderLabs-Blog/Elephone-P9000-Lock-Screen-Lockout-Bypass/?page=1&year=0&month=0
Third Party Advisory
https://www.youtube.com/watch?v=dwyzonP2eZw
Press/Media Coverage
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*

cpe:2.3:h:elephone:p9000:-:*:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.00028

Низкий

6.8 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-955g-wpj8-g9rc

CVSS3: 6.8

github

больше 3 лет назад