CVE-2016-6564

CVE-2016-6564 concerns Ragentek Android firmware that embeds a privileged OTA update binary (/system/bin/debugs) which communicates with three HTTP hosts over an unencrypted channel. The rootkit-like binary runs with root privileges and can execute arbitrary root commands in responses from the se...