Lucene search
K

7 matches found

BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.1 views

The vulnerability of the categoryId parameter in the WWebView component of the MCE Systems mobile device lifecycle management system allows attackers to enhance their privileges.

The vulnerability of the categoryId parameter in the WWebView component of the MCE Systems lifecycle management system is related to errors in link processing before accessing a file, as well as deserialization of the PendingDynamicLinkData structure from the Intent Extra array with the key...

8.6CVSS5.9AI score
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:0 a.m.2 views

The vulnerability of the WWebView component of MCE Systems’ mobile device lifecycle management system allows attackers to enhance their privileges.

The vulnerability of MCE Systems’ WWebView component in mobile device lifecycle management systems is related to errors in handling links before accessing a file. Exploiting this vulnerability can allow attackers to enhance their privileges by introducing malicious code...

8.6CVSS5.8AI score
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.4 views

The vulnerability of the WWebView component of MCE Systems’ mobile device lifecycle management system allows a hacker to execute arbitrary commands.

The vulnerability of MCE Systems’ WWebView component in mobile device lifecycle management systems lies in the lack of measures taken to neutralize special elements used by the operating system when processing the value parameter. Exploiting this vulnerability allows an attacker to execute...

8.6CVSS6.1AI score
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.2 views

The vulnerability of MCE Systems’ WWebView component, a component of the mobile device lifecycle management system, allows an attacker to execute a “man-in-the-middle” attack and gain unauthorized access to protected information.

The vulnerability of MCE Systems’ WWebView component, a component used in mobile device lifecycle management systems, relates to the transmission of data in an open manner. Exploiting this vulnerability could allow attackers to execute a “man-in-the-middle” attack and gain unauthorized access to...

7.7CVSS6AI score
Exploits0References5
The Hacker News
The Hacker News
added 2022/05/28 8:37 a.m.51 views

Microsoft Finds Critical Bugs in Pre-Installed Apps on Millions of Android Devices

Four high severity vulnerabilities have been disclosed in a framework used by pre-installed Android System apps with millions of downloads. The issues, now fixed by its Israeli developer MCE Systems, could have potentially allowed threat actors to stage remote and local attacks or be abused as...

0.5AI score
Exploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2022/05/27 4:0 p.m.38 views

Android apps with millions of downloads exposed to high-severity vulnerabilities

Microsoft uncovered high-severity vulnerabilities in a mobile framework owned by mce Systems and used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote albeit complex or local attacks. The vulnerabilities, which affected apps...

7.2AI score
Exploits0
Microsoft Secure
Microsoft Secure
added 2022/05/27 4:0 p.m.27 views

Android apps with millions of downloads exposed to high-severity vulnerabilities

Microsoft uncovered high-severity vulnerabilities in a mobile framework owned by mce Systems and used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote albeit complex or local attacks. The vulnerabilities, which affected apps...

7.2AI score
Exploits0
Rows per page
Query Builder