CVE-2013-4872

EPSS 0.02%
Veröffentlicht 18.07.2013 16:51:40
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Google Glass before XE6 does not properly restrict the processing of QR codes, which allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted symbol, as demonstrated by selecting a Wi-Fi access point in order to conduct a man-in-the-middle attack.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Glass Version <= xe5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.033

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good/

https://exchange.xforce.ibmcloud.com/vulnerabilities/85804

https://nvd.nist.gov/vuln/detail/CVE-2013-4872

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4872

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4872

EUVD