PT-2013-4556

CVE-2013-3666

·

Published

2013-05-29

·

Updated

2013-05-31

Description by

CVSS 2.0
7.2
High
MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions LG Optimus G E973
Description The issue allows physically proximate attackers to execute arbitrary commands. This can be achieved by entering USB Debugging mode, using Android Debug Bridge (adb) to establish a USB connection, dialing 3845#*973#, modifying the WLAN Test Wi-Fi Ping Test/User Command tcpdump command string, and pressing the CANCEL button.
Recommendations For LG Optimus G E973, as a temporary workaround, consider disabling the USB Debugging mode to minimize the risk of exploitation. Restrict physical access to the device to prevent attackers from establishing a USB connection. Avoid using the tcpdump command in the WLAN Test Wi-Fi Ping Test/User Command until the issue is resolved.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾