CVE-2013-3666

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-29 · updated 2026-06-16
Weakness: CWE-264

Description

The LG Hidden Menu component for Android on the LG Optimus G E973 allows physically proximate attackers to execute arbitrary commands by entering USB Debugging mode, using Android Debug Bridge (adb) to establish a USB connection, dialing 3845#*973#, modifying the WLAN Test Wi-Fi Ping Test/User Command tcpdump command string, and pressing the CANCEL button.

Affected products

Android: 4.1.2
LG Optimus G E973: all versions

References

http://seclists.org/fulldisclosure/2013/May/166
http://www.youtube.com/watch?v=ZfbDIpTY-t4
https://plus.google.com/110348415484169880343/posts/9KxBtkyuYcj
http://seclists.org/fulldisclosure/2013/May/166
http://www.youtube.com/watch?v=ZfbDIpTY-t4
https://plus.google.com/110348415484169880343/posts/9KxBtkyuYcj

Get alerted when CVE-2013-3666 or the next vulnerability affects your stack