What’s Vulnerable › Vulnerabilities

CVE-2014-6602

• Severity: medium (CVSS 6.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-09-22 · updated 2026-06-17
• Weakness: CWE-264

Description

Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option.

Affected products

• Microsoft Nokia Asha 501: all versions
• Microsoft Nokia Asha 501 Software: 14.0.4

References

• http://packetstormsecurity.com/files/128320/Nokia-Asha-501-Lock-Bypass.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96195
• http://packetstormsecurity.com/files/128320/Nokia-Asha-501-Lock-Bypass.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96195

Get alerted when CVE-2014-6602 or the next vulnerability affects your stack