What is the CVSS score of CVE-2013-3051?

CVE-2013-3051 has a CVSS 2.0 base score of 6.2 (Medium). CVSS vector: AV:L/AC:H/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.0%.

Is there a public PoC exploit available for CVE-2013-3051?

Yes, a public proof-of-concept exploit is available for CVE-2013-3051. Prioritise patching immediately. EPSS: 0.0%.

Msm8960 CVE-2013-3051

MEDIUM

Configuration (CWE-16)

2013-04-13 cve@mitre.org

Information Disclosure Google Qualcomm Msm8960 Android Atrix Hd Razr Hd Razr M

6.2

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.2 MEDIUM

AV:L/AC:H/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:H/Au:N/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

High

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Apr 13, 2013 - 10:56 cve.org

MEDIUM 6.2

DescriptionCVE.org

The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-16. The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596. Affected products include: Qualcomm Msm8960, Motorola Android, Motorola Atrix Hd, Motorola Razr Hd, Motorola Razr M.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.