7.2 - CVE-2014-4325

Executive Summary

Informations
Name	CVE-2014-4325	First vendor Publication	2014-08-24
Vendor	Cve	Last vendor Modification	2014-08-28

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	7.2	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The cmd_boot function in app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a boot command for an arbitrary kernel image.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4325

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-287	Improper Authentication

CPE : Common Platform Enumeration

Type	Description	Count
Application	Little Kernel Project Little Kernel Bootloader cpe:2.3:a:little_kernel_project:little_kernel_bootloader:-:::::android::	1

Sources (Detail)

Source	Url
CONFIRM	https://www.codeaurora.org/projects/security-advisories/fastboot-boot-command...

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:33:15	Multiple Updates
2021-04-22 01:39:52	Multiple Updates
2020-05-23 00:41:25	Multiple Updates
2014-08-28 09:22:42	Multiple Updates
2014-08-25 21:23:39	Multiple Updates
2014-08-25 09:23:26	First insertion