6.6

CVE-2016-0812

EPSS 0.02%
Veröffentlicht 07.02.2016 01:59:10
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security@android.com
CVE-Watchlists
Login
Unerledigt
Login

The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25229538.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version5.1

Google ≫ Android Version5.1.0

Google ≫ Android Version5.1.1

Google ≫ Android Version6.0

Google ≫ Android Version6.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.02

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.1	0.9	5.2	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
nvd@nist.gov	6.6	3.9	9.2	AV:L/AC:L/Au:N/C:N/I:C/A:C

http://source.android.com/security/bulletin/2016-02-01.html

Vendor Advisory

https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541

https://nvd.nist.gov/vuln/detail/CVE-2016-0812

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-0812

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-0812

EUVD