Lucene search

JpcertCVE-2012-2640

HistoryJul 05, 2012 - 5:55 p.m.

CVE-2012-2640

2012-07-0517:55:02

CWE-264

jpcert

web.nvd.nist.gov

nec

biglobe

yome collection

android

remote attackers

imei

sd card

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.004

Percentile

74.9%

JSON

The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READ_PHONE_STATE permission.

Affected configurations

Nvd

Node

yomecollenec_biglobe_yome_collectionRange≤1.8.3

AND

googleandroid

VendorProductVersionCPE
yomecollenec_biglobe_yome_collection*cpe:2.3:a:yomecolle:nec_biglobe_yome_collection:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
yomecolle	nec_biglobe_yome_collection	*	cpe:2.3:a:yomecolle:nec_biglobe_yome_collection::::::::
google	android	*	cpe:2.3:o:google:android::::::::

References

jvn.jp/en/jp/JVN05102851/995355/index.html

jvn.jp/en/jp/JVN05102851/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000064

www.nec.co.jp/security-info/secinfo/nv12-008.html

yomecolle.jp/info/android_oshirase/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.004

Percentile

74.9%

JSON

Related for CVE-2012-2640