PT-2017-7822

CVE-2016-10225

·

Published

2017-03-27

·

Updated

2021-04-21

Description by

CVSS 2.0
7.2
High
MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Allwinner 3.4 legacy kernel for H3, A83T and H8 devices
Description The issue allows local users to gain root privileges. This is achieved by sending "rootmydevice" to the /proc/sunxi debug/sunxi debug API endpoint.
Recommendations For Allwinner 3.4 legacy kernel for H3, A83T and H8 devices, consider restricting access to the /proc/sunxi debug/sunxi debug endpoint to prevent exploitation.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2016-10225
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com