VDB

GCVE-110-CERTCC-2016-624539

GCVE-110-CERTCC-2016-624539
Advisory PublishedCVSS 9.3/10
Vulnetix · Advisory published November 11, 2016
Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute arbitrary code with root privileges.
Download JSON Open in Console

Risk Scores

CVSS 2.0
9.3/10
Critical · AV:N/AC:M/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score8.4remediation_levelNDreport_confidenceCenvironmental_score6.299215776target_distributionMenvironmental_vectorCDP:N/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2016-6564

References

Ragentek Android OTA update mechanism vulnerable to MITM attack
url
Ragentek Android OTA update mechanism vulnerable to MITM attack
url
Ragentek Android OTA update mechanism vulnerable to MITM attack
url
Ragentek Android OTA update mechanism vulnerable to MITM attack
url
Ragentek Android OTA update mechanism vulnerable to MITM attack
url
Ragentek Android OTA update mechanism vulnerable to MITM attack
advisory

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›