Cerberus Owners: Massive security flaw

Forums › Android › Cerberus Owners: Massive security flaw

eXDee

4033 posts

Uber Geek
+1 received by user: 1070

Trusted

#128645 17-Aug-2013 21:00

http://www.ifc0nfig.com/cerberus-exploit-accessing-any-device/

For those of you avid cerberus fans, turns out its a great backdoor for anyone playing the IMEI lottery, they can win access to your device! Woo!

Reportedly will be fixed in version 2.4, so make sure you upgrade the moment that releases.

Yabanize

2351 posts

Uber Geek
+1 received by user: 583

#880702 18-Aug-2013 19:39

Avast rooted hard reset proof anti theft for me :P

jeffnz

2870 posts

Uber Geek
+1 received by user: 666

Trusted

Lifetime subscriber

#880716 18-Aug-2013 20:17

I've checked mine its been updated so not an issue but well spotted.

Galaxy S10

Garmin Fenix 5

jeffnz

2870 posts

Uber Geek
+1 received by user: 666

Trusted

Lifetime subscriber

#880717 18-Aug-2013 20:24

actually following links it would seem that the hole can't be used regardless of what the update does so was fixed before this thread was made.

"anyway, server-side the bug was fixed yesterday. This means that the exploit won't work, and you can safely keep Cerberus (whatever version you have) installed on your device. I know the guy who found the exploit says otherwise, but that's not true. Here is the IMEI number of my Nexus 4: 356489051656994, in case he wants to send a wipe command to the phone and prove me wrong.

An update of the app will be published tomorrow or on Monday, and after that we will release a longer statement. Thanks for your patience."
update

Galaxy S10

Garmin Fenix 5