What’s Vulnerable › Vulnerabilities

CVE-2013-4872

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-07-18 · updated 2026-06-16
• Weakness: CWE-264

Description

Google Glass before XE6 does not properly restrict the processing of QR codes, which allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted symbol, as demonstrated by selecting a Wi-Fi access point in order to conduct a man-in-the-middle attack.

Affected products

• Google Glass: through xe5

References

• https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85804
• https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85804

Get alerted when CVE-2013-4872 or the next vulnerability affects your stack