CVE-2013-4872

EPSS 0.02%
Published 18.07.2013 16:51:40
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Google Glass before XE6 does not properly restrict the processing of QR codes, which allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted symbol, as demonstrated by selecting a Wi-Fi access point in order to conduct a man-in-the-middle attack.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Google ≫ Glass Version <= xe5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.02%	0.033

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good/

https://exchange.xforce.ibmcloud.com/vulnerabilities/85804

https://nvd.nist.gov/vuln/detail/CVE-2013-4872

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4872

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4872

EUVD