CVE-2016-2421
published 2016-04-18CVE-2016-2421: Setup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate attackers to bypass the Factory Reset Protection protection…
PriorityP421medium6.1CVSS 3.0
AVPACLPRNUINSUCNIHAH
EPSS
0.17%
6.4th percentile
Setup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26154410.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
nvdv2.06.6MEDIUMAV:L/AC:L/Au:N/C:N/I:C/A:C
osv6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fmx7-hh3j-fr6f: Setup Wizard in Android 5
ghsa_unreviewed·2022-05-17
CVE-2016-2421 [MEDIUM] GHSA-fmx7-hh3j-fr6f: Setup Wizard in Android 5
Setup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26154410.
OSV
CVE-2016-2421: Setup Wizard in Android 5
osv·2016-04-18·CVSS 6.1
CVE-2016-2421 [MEDIUM] CVE-2016-2421: Setup Wizard in Android 5
Setup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26154410.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-04-18
Published