CVE-2016-0813
published 2016-02-07CVE-2016-0813: packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before…
PriorityP422medium6.1CVSS 3.0
AVPACLPRNUINSUCNIHAH
EPSS
0.18%
7.8th percentile
packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before 2016-02-01 does not properly check for device provisioning, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25476219.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
nvdv2.06.6MEDIUMAV:L/AC:L/Au:N/C:N/I:C/A:C
osv6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hxfj-mrr7-fmpm: packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent
ghsa_unreviewed·2022-05-17
CVE-2016-0813 [MEDIUM] GHSA-hxfj-mrr7-fmpm: packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent
packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before 2016-02-01 does not properly check for device provisioning, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25476219.
OSV
CVE-2016-0813: packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent
osv·2016-02-07·CVSS 6.1
CVE-2016-0813 [MEDIUM] CVE-2016-0813: packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent
packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before 2016-02-01 does not properly check for device provisioning, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25476219.
Android
CVE-2016-0813: Android Security Bulletin 2016-02-01
CVE: CVE-2016-0813
Severity: MEDIUM
Affected AOSP versions: 5
vendor_android·2016-02-01·CVSS 6.1
CVE-2016-0813 [MEDIUM] CVE-2016-0813: Android Security Bulletin 2016-02-01
CVE: CVE-2016-0813
Severity: MEDIUM
Affected AOSP versions: 5
Android Security Bulletin 2016-02-01
CVE: CVE-2016-0813
Severity: MEDIUM
Affected AOSP versions: 5.1.1, 6.0, 6.0.1
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://source.android.com/security/bulletin/2016-02-01.htmlhttps://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1http://source.android.com/security/bulletin/2016-02-01.htmlhttps://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1
2016-02-07
Published