CVE-2013-3051

Severity Score

6.2

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596.

El núcleo TrustZone, cuando se utiliza con determinada versión de Motorola Android 4.1.2, el Motorola Razr HD, M Razr, Atrix HD con el chipset Qualcomm MSM8960 no verifica la asociación entre determinada argumento dirección-física y un región de memoria, lo que permite desbloquear a usuarios locales el bootloader usando el modo kernel para realizar operaciones SMC 0x9 y 0x2. Se trata de una vulnerabilidad diferente a CVE-2013-2596.

*Credits: N/A

CVSS Scores

NISTv2 6.2

Attack Vector

Local

Attack Complexity

High

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-04-12 CVE Reserved
2013-04-13 CVE Published
2024-09-17 CVE Updated
2024-09-17 EPSS Updated
2024-09-17 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-16: Configuration

CAPEC

References (2)

URL	Tag	Source
http://www.droid-life.com/2013/04/08/motorola-razr-hd-razr-m-and-atrix-hd-bootloader-unlock-released	X_refsource_misc

URL	Date	SRC
http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html	2024-09-17

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Qualcomm Search vendor "Qualcomm"	Msm8960 Search vendor "Qualcomm" for product "Msm8960"	-	-	Affected	in	Motorola Search vendor "Motorola"	Atrix Hd Search vendor "Motorola" for product "Atrix Hd"	-	-	Affected
Qualcomm Search vendor "Qualcomm"	Msm8960 Search vendor "Qualcomm" for product "Msm8960"	-	-	Affected	in	Motorola Search vendor "Motorola"	Razr Hd Search vendor "Motorola" for product "Razr Hd"	-	-	Affected
Qualcomm Search vendor "Qualcomm"	Msm8960 Search vendor "Qualcomm" for product "Msm8960"	-	-	Affected	in	Motorola Search vendor "Motorola"	Razr M Search vendor "Motorola" for product "Razr M"	-	-	Affected
Motorola Search vendor "Motorola"	Android Search vendor "Motorola" for product "Android"	4.1.2 Search vendor "Motorola" for product "Android" and version "4.1.2"	-	Affected	in	Motorola Search vendor "Motorola"	Atrix Hd Search vendor "Motorola" for product "Atrix Hd"	-	-	Affected
Motorola Search vendor "Motorola"	Android Search vendor "Motorola" for product "Android"	4.1.2 Search vendor "Motorola" for product "Android" and version "4.1.2"	-	Affected	in	Motorola Search vendor "Motorola"	Razr Hd Search vendor "Motorola" for product "Razr Hd"	-	-	Affected
Motorola Search vendor "Motorola"	Android Search vendor "Motorola" for product "Android"	4.1.2 Search vendor "Motorola" for product "Android" and version "4.1.2"	-	Affected	in	Motorola Search vendor "Motorola"	Razr M Search vendor "Motorola" for product "Razr M"	-	-	Affected