CVE-2018-14987: Incorrect Permission Assignment for Critical Resource

The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201N/m201N:4.4.2/KOT49H/20160106:user/test-keys contains the Android framework with a package name of android versionCode=19, versionName=4.4.2-20170213 that dynamically registers a broadcast receiver app component named...

CVE-2018-6598

An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys devices. Any app co-located on the device can send an intent to factory reset the device programmatically because of com.android.server.MasterClearReceiver. This does not require any user interactio...

PT-2018-17660

Name of the Vulnerable Software and Affected Versions Orbic Wonder Orbic/RC555L version 7.1.2 Description An issue allows any co-located app to send an intent to com.android.server.MasterClearReceiver to factory reset the device programmatically without requiring user interaction or permission...