CVE-2014-6602: Microsoft Nokia Asha 501

Medium severity, CVSS 6.6. EPSS: 2.2% chance of exploitation in the next 30 days.

Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option.

Affected products

• Microsoft Nokia Asha 501
• Microsoft Nokia Asha 501 Software: version 14.0.4 only

Published 2014-09-22. Last modified 2026-06-17.