CVEvulnerability
CVE-2013-4872
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Google Glass before XE6 does not properly restrict the processing of QR codes, which allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted symbol, as demonstrated by selecting a Wi-Fi access point in order to conduct a man-in-the-middle attack.
Affected configurations
• google glass (<= xe5)
Related
Weakness · not in database (1)
References
- https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good/ blog.lookout.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85804 exchange.xforce.ibmcloud.com
- https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good/ blog.lookout.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85804 exchange.xforce.ibmcloud.com