CVE-2019-15422

The Doogee Mix Android device with a build fingerprint of DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a confused...

CVE-2019-15424

The Doogee BL5000 Android device with a build fingerprint of DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a...

Code injection

The Blackview BV9000Pro-F Android device with a build fingerprint of Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings...

CVE-2019-15424

CVE-2019-15424 affects the Doogee BL5000 Android device (build DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys) via a pre-installed com.mediatek.factorymode app. The issue enables unauthorized wireless settings modification through a confused deputy attack, exploitable by any app co-...

CVE-2019-15421: Externally Controlled Reference to a Resource in Another Sphere

The Blackview BV7000Pro Android device with a build fingerprint of Blackview/BV7000Pro/BV7000Pro:7.0/NRD90M/1493011204:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings...

CVE-2019-15422: Externally Controlled Reference to a Resource in Another Sphere

The Doogee Mix Android device with a build fingerprint of DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a confused...

PT-2019-14151

Name of the Vulnerable Software and Affected Versions Doogee Mix Android device with a build fingerprint of DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys Description The issue allows unauthorized modification of wireless settings via a confused deputy attack. This capability can be...

PT-2019-14154

Name of the Vulnerable Software and Affected Versions Kata M4s Android device with a build fingerprint of alps/full hct6750 66 n/hct6750 66 n:7.0/NRD90M/1495624556:user/test-keys Description The issue allows unauthorized modification of wireless settings via a confused deputy attack. This is...

PT-2019-14149

Name of the Vulnerable Software and Affected Versions Blackview BV9000Pro-F Android device with a build fingerprint of Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys Description The issue concerns a pre-installed app with a package name of com.mediatek.factorymode tha...

PT-2019-14150

Name of the Vulnerable Software and Affected Versions Blackview BV7000 Pro version 7.0 Description The issue concerns a pre-installed app with a package name of com.mediatek.factorymode that allows unauthorized modification of wireless settings via a confused deputy attack. This capability can be...

PT-2019-14153

Name of the Vulnerable Software and Affected Versions Doogee BL5000 Android device with a build fingerprint of DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys Description The issue allows unauthorized modification of wireless settings via a confused deputy attack. This capability can...

CVE-2019-15424: Externally Controlled Reference to a Resource in Another Sphere

The Doogee BL5000 Android device with a build fingerprint of DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a...

CVE-2019-15420: Externally Controlled Reference to a Resource in Another Sphere

The Blackview BV9000Pro-F Android device with a build fingerprint of Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings...

CVE-2019-15423: Externally Controlled Reference to a Resource in Another Sphere

The Bluboo BlubooS1 Android device with a build fingerprint of BLUBOO/BlubooS1/BlubooS1:7.0/NRD90M/1495809471:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via...

CVE-2019-15425: Externally Controlled Reference to a Resource in Another Sphere

The Kata M4s Android device with a build fingerprint of alps/fullhct675066n/hct675066n:7.0/NRD90M/1495624556:user/test-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a...

PT-2019-14152

Name of the Vulnerable Software and Affected Versions Bluboo Bluboo S1 Android device with a build fingerprint of BLUBOO/Bluboo S1/Bluboo S1:7.0/NRD90M/1495809471:user/release-keys com.mediatek.factorymode app version 1 Description The issue allows unauthorized modification of wireless settings v...