Vulnerability in Microsoft Nokia Asha 501
CVE-2014-6602
Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option.
EPSS: 0.022 (80.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Nokia_asha_501
- Microsoft Nokia_asha_501_software — versions 14.0.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)