High severity · published Mar 27, 2017
CVE-2016-10225
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to…
7.8
CVSS
4%
EPSS
No
On KEV
Description
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxi_debug/sunxi_debug.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux-3.4-sunxi · Allwinner
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10225
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10225
Mailing List
http://www.openwall.com/lists/oss-security/2016/10/05/16
Mailing List
http://www.openwall.com/lists/oss-security/2017/02/15/9
Third Party Advisory
http://www.securityfocus.com/bid/93442
Mailing List
https://forum.armbian.com/index.php?/topic/1108-security-alert-for-allwinner-sun8i-h3a83th8/
Issue Tracking
https://irclog.whitequark.org/linux-sunxi/2016-04-29#16314390
Exploit
https://www.rapid7.com/db/modules/exploit/multi/local/allwinner_backdoor