{"uuid": "f4a6b99b-e054-4406-b285-efacce897a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-10225", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/local/allwinner_backdoor.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"armle\", \"author\": [\"h00die \", \"KotCzarny\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module attempts to exploit a debug backdoor privilege escalation in\\n          Allwinner SoC based devices.\\n\\n          Vulnerable Allwinner SoC chips: H3, A83T or H8 which rely on Kernel 3.4.\\n\\n          Vulnerable OS: all OS images available for Orange Pis,\\n          any for FriendlyARM's NanoPi M1,\\n          SinoVoip's M2+ and M3,\\n          Cuebietech's Cubietruck +\\n          Linksprite's pcDuino8 Uno.\\n          Exploitation may be possible against Dragon (x10) and Allwinner Android tablets.\", \"disclosure_date\": \"2016-04-30\", \"fullname\": \"exploit/multi/local/allwinner_backdoor\", \"is_install_path\": true, \"mod_time\": \"2023-01-28 15:02:24 +0000\", \"name\": \"Allwinner 3.4 Legacy Kernel Local Privilege Escalation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/local/allwinner_backdoor.rb\", \"platform\": \"Android,Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/local/allwinner_backdoor\", \"references\": [\"CVE-2016-10225\", \"URL-http://forum.armbian.com/index.php/topic/1108-security-alert-for-allwinner-sun8i-h3a83th8/\", \"URL-https://webcache.googleusercontent.com/search?q=cache:l2QYVUcDflkJ:https://github.com/allwinner-zh/linux-3.4-sunxi/blob/master/arch/arm/mach-sunxi/sunxi-debug.c+&cd=3&hl=en&ct=clnk&gl=us\", \"URL-http://irclog.whitequark.org/linux-sunxi/2016-04-29#16314390\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:24.775852Z"}