PT-2012-4387

CVE-2012-2949

·

Published

2012-05-29

·

Updated

2012-05-30

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ZTE sync agent version for Android 2.3.4 on the Score M device
Description The issue allows remote attackers to gain privileges via a crafted application, due to the use of a hardcoded ztex1609523 password in the ZTE sync agent program.
Recommendations For the ZTE sync agent program on Android 2.3.4, consider changing the hardcoded ztex1609523 password to a secure, unique password to prevent unauthorized access.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2012-2949
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com