Lucene search
HistoryOct 06, 2015 - 5:59 p.m.
CVE-2015-6606
cve-2015-6606
secure element evaluation kit
seek
smartcard api
android
privilege escalation
crafted application
signature
nvd
22301786
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.3%
The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786.
Affected configurations
Node
googleandroidRange≤5.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| google:android | google android | le | 5.1 |
Related
ubuntucve
ubuntucve
CVE-2015-6606
2015-10-06 00:00:00
prion
prion
Code injection
2015-10-06 17:59:00
nvd
nvd
CVE-2015-6606
2015-10-06 17:59:25
cvelist
cvelist
CVE-2015-6606
2015-10-06 17:00:00
androidsecurity
androidsecurity
Nexus Security Bulletin - October 2015
2015-10-05 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.3%
Related for CVE-2015-6606