---
id: 4551
title: "Remote Code Execution as System User on Android 5 Samsung Devices abusing WifiCredService (Hotspot 2.0)"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/remote-code-execution-as-system-user-on-android-5-samsung-devices-abusing-wificredservice-hotspot-20.html"
published_at: "2015-11-11T23:00:00Z"
tags: ["rce", "android", "path-traversal", "mobile-security", "vulnerability", "samsung"]
phying_url: "https://phying.com/item/4551"
lang: en
---

# Remote Code Execution as System User on Android 5 Samsung Devices abusing WifiCredService (Hotspot 2.0)

## Summary

Analysis of an Android 5 Samsung RCE (found independently by Project Zero and Quarkslab): WifiCredService unzips cred*.zip files without validating names, allowing system-level arbitrary file writes.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2015-11-11T23:00:00Z
- **Original:** https://blog.quarkslab.com/remote-code-execution-as-system-user-on-android-5-samsung-devices-abusing-wificredservice-hotspot-20.html
- **Phying News:** https://phying.com/item/4551