Vulnerability CVE-2014-6602
Published: 2014-09-21   Modified: 2014-09-22

Description:
Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option.

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.6/10
9.2/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
None
Affected software
Microsoft -> Nokia asha 501 software 
Microsoft -> Nokia asha 501 

 References:
http://packetstormsecurity.com/files/128320/Nokia-Asha-501-Lock-Bypass.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/96195
Copyright 2024, cxsecurity.com

 

Back to Top