CVE-2019-15394

The Asus ZenFone 5 Selfie Android device with a build fingerprint of asus/WWPhone/ASUSX017D1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app versionCode=1, versionName=1 that allows unauthorized wireless settin...

CVE-2019-15394

CVE-2019-15394 concerns the Asus ZenFone 5 Selfie (ASUS_X017D_1, Android 7.1.1). A pre-installed app with package name com.asus.atd.smmitest (versionCode 1, versionName 1) enables unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app ...

CVE-2019-15393

The Asus ZenFone Live Android device with a build fingerprint of asus/WWPhone/ASUSX00LD3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app versionCode=1, versionName=1 that allows unauthorized wireless settings...

CVE-2019-15393

The CVE-2019-15393 entry concerns Asus ZenFone Live devices where a pre-installed app (com.asus.atd.smmitest, versionCode=1, versionName=1) permits unauthorized wireless settings modification via a confused-deputy attack. The flaw is triggered by any app co-located on the device and represents a ...

CVE-2019-15744

The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyakisoftbank/keyakisoftbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a pre-installed app with a package name of jp.softbank.mb.tdrl app versionCode=1413005, versionName=1.3.0 that allows unauthoriz...

CVE-2019-15744

CVE-2019-15744 concerns a Sony Xperia XZs running Android 7.1.1 with build fingerprint Sony/keyaki_softbank/keyaki_softbank. A pre-installed app (package: jp.softbank.mb.tdrl, versionCode 1413005, versionName 1.3.0) on the device allows unauthorized wireless settings modification through a confus...

CVE-2019-15421: Externally Controlled Reference to a Resource in Another Sphere

The Blackview BV7000Pro Android device with a build fingerprint of Blackview/BV7000Pro/BV7000Pro:7.0/NRD90M/1493011204:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings...

CVE-2019-15428: Externally Controlled Reference to a Resource in Another Sphere

The Xiaomi Mi Note 2 Android device with a build fingerprint of Xiaomi/scorpio/scorpio:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app versionCode=40000, versionName=4.0.00 that allows unauthorized wireless settings modification vi...

CVE-2019-15466: Externally Controlled Reference to a Resource in Another Sphere

The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakuraindia/sakuraindia:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app versionCode=1, versionName=QL1715201812191721 that allows...

CVE-2019-15424: Externally Controlled Reference to a Resource in Another Sphere

The Doogee BL5000 Android device with a build fingerprint of DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a...

CVE-2019-15422: Externally Controlled Reference to a Resource in Another Sphere

The Doogee Mix Android device with a build fingerprint of DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a confused...

CVE-2019-15427: Externally Controlled Reference to a Resource in Another Sphere

The Xiaomi Mi Mix Android device with a build fingerprint of Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app versionCode=40000, versionName=4.0.00 that allows unauthorized wireless settings modification via a...

CVE-2019-15426: Externally Controlled Reference to a Resource in Another Sphere

The Xiaomi 5S Plus Android device with a build fingerprint of Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app versionCode=40000, versionName=4.0.00 that allows unauthorized wireless settings modification via ...

CVE-2019-15744: Externally Controlled Reference to a Resource in Another Sphere

The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyakisoftbank/keyakisoftbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a pre-installed app with a package name of jp.softbank.mb.tdrl app versionCode=1413005, versionName=1.3.0 that allows unauthoriz...

PT-2019-14154

Name of the Vulnerable Software and Affected Versions Kata M4s Android device with a build fingerprint of alps/full hct6750 66 n/hct6750 66 n:7.0/NRD90M/1495624556:user/test-keys Description The issue allows unauthorized modification of wireless settings via a confused deputy attack. This is...

PT-2019-14364

Name of the Vulnerable Software and Affected Versions Sony Xperia XZs Android device with a build fingerprint of Sony/keyaki softbank/keyaki softbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys jp.softbank.mb.tdrl app version 1.3.0 Description The issue allows unauthorized modification...

PT-2019-14195

Name of the Vulnerable Software and Affected Versions Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura india/sakura india:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys Description The issue concerns a pre-installed app with a package name of com.huaqin.facto...

PT-2019-14196

Name of the Vulnerable Software and Affected Versions Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys Description The issue concerns a pre-installed app with a package name of com.huaqin.factory that allo...

PT-2019-14197

Name of the Vulnerable Software and Affected Versions Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys Description The issue concerns a pre-installed app with a package name of com.huaqin.factory that allo...

PT-2019-14156

Name of the Vulnerable Software and Affected Versions Xiaomi Mi Mix Android device with a build fingerprint of Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys com.miui.powerkeeper app version 4.0.00 Description The issue allows unauthorized modification of wireless settings via a...