CVE-2014-6602

Name of the Vulnerable Software and Affected Versions Microsoft Asha OS version 14.0.4

Description The issue allows physically proximate attackers to bypass the lock-screen protection mechanism. This can lead to unauthorized access, where attackers can read or modify contact information or dial arbitrary telephone numbers. The bypass is achieved by tapping the SOS Option and then tapping the Green Call Option.

Recommendations For Microsoft Asha OS version 14.0.4, as a temporary workaround, consider disabling the SOS Option or restricting access to the lock screen to minimize the risk of exploitation.