Vulnerability CVE-2013-3051

Vulnerability CVE-2013-3051

Published: 2013-04-13

Description:

The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596.

See advisories in our WLB2 database:

	Topic	Author	Date
High	Motorola Bootloader Unlocking	Dan Rosenberg	16.04.2013

Type:

CWE-16

(Configuration)

CVSS2 => (AV:L/AC:H/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.2/10	10/10	1.9/10

Exploit range	Attack complexity	Authentication
Local	High	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Qualcomm -> Msm8960
Motorola -> Atrix hd
Motorola -> Razr hd
Motorola -> Razr m
Motorola -> Android

References:

http://www.droid-life.com/2013/04/08/motorola-razr-hd-razr-m-and-atrix-hd-bootloader-unlock-released/

http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html

Copyright 2024, cxsecurity.com