WWebView Component Privilege Escalation

The vulnerability of the categoryId parameter in the WWebView component of the MCE Systems lifecycle management system is related to errors in link processing before accessing a file, as well as deserialization of the PendingDynamicLinkData structure from the Intent Extra array with the key...

WWebView Component Privilege Escalation

The vulnerability of MCE Systems’ WWebView component in mobile device lifecycle management systems is related to errors in handling links before accessing a file. Exploiting this vulnerability can allow attackers to enhance their privileges by introducing malicious code...

MCE Systems WWebView MITM Unauthorized Access

The vulnerability of MCE Systems’ WWebView component, a component used in mobile device lifecycle management systems, relates to the transmission of data in an open manner. Exploiting this vulnerability could allow attackers to execute a “man-in-the-middle” attack and gain unauthorized access to...

WWebView Component Arbitrary Command Execution

The vulnerability of MCE Systems’ WWebView component in mobile device lifecycle management systems lies in the lack of measures taken to neutralize special elements used by the operating system when processing the value parameter. Exploiting this vulnerability allows an attacker to execute...

Microsoft Finds Critical Bugs in Pre-Installed Apps on Millions of Android Devices

Four high severity vulnerabilities have been disclosed in a framework used by pre-installed Android System apps with millions of downloads. The issues, now fixed by its Israeli developer MCE Systems, could have potentially allowed threat actors to stage remote and local attacks or be abused as...

Android apps with millions of downloads exposed to high-severity vulnerabilities

Microsoft uncovered high-severity vulnerabilities in a mobile framework owned by mce Systems and used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote albeit complex or local attacks. The vulnerabilities, which affected apps...

Android apps with millions of downloads exposed to high-severity vulnerabilities

Microsoft uncovered high-severity vulnerabilities in a mobile framework owned by mce Systems and used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote albeit complex or local attacks. The vulnerabilities, which affected apps...

PT-2021-7240

Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The issue is related to errors in link processing before accessing a file in the MCE Systems mobile device lifecycle management system's WebView component. Exploitation of this issue may...

PT-2021-7221

Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The issue is related to the transmission of data in plain text in the MCE Systems mobile device lifecycle management system's WebView component. This could allow an attacker to implement ...

PT-2021-7244

Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The issue is related to the categoryId parameter in the WebView component of the MCE Systems mobile device lifecycle management system. It involves errors in link processing before...

PT-2021-7222

Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The vulnerability in the MCE Systems mobile device lifecycle management system's WebView component is related to the failure to neutralize special elements used in the operating system...