What’s Vulnerable › Vulnerabilities

CVE-2013-4777

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-09-25 · updated 2026-06-16
• Weakness: CWE-264

Description

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.

Affected products

• Android: 2.3.7
• Motorola Defy Xt: all versions

References

• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J
• https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J

Get alerted when CVE-2013-4777 or the next vulnerability affects your stack