Design/Logic Flaw

Improper directory permissions in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access...

Code injection

The Xiaomi 5S Plus Android device with a build fingerprint of Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app versionCode=40000, versionName=4.0.00 that allows unauthorized wireless settings modification via ...

Code injection

The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyakisoftbank/keyakisoftbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a pre-installed app with a package name of jp.softbank.mb.tdrl app versionCode=1413005, versionName=1.3.0 that allows unauthoriz...

Code injection

The Blackview BV9000Pro-F Android device with a build fingerprint of Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings...

Code injection

The Blackview BV7000Pro Android device with a build fingerprint of Blackview/BV7000Pro/BV7000Pro:7.0/NRD90M/1493011204:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings...

Code injection

The Doogee BL5000 Android device with a build fingerprint of DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a...

Code injection

The Doogee Mix Android device with a build fingerprint of DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys contains a pre-installed app with a package name of com.mediatek.factorymode app versionCode=1, versionName=1 that allows unauthorized wireless settings modification via a confused...

CVE-2019-11153

CVE-2019-11153 involves memory corruption in the Intel PROSet/Wireless WiFi Software extension DLL prior to version 21.40. The vulnerability can be exploited by an authenticated, local user to achieve escalation of privilege, information disclosure, and denial of service. Affected component is th...

CVE-2019-11156

Summary: CVE-2019-11156 affects Intel PROSet/Wireless WiFi Software before version 21.40. The issue is described as logic errors that may allow an authenticated, local attacker to escalate privileges, cause a denial of service, and disclose information. Affected software: Intel PROSet/Wireless Wi...

CVE-2019-11156

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

CVE-2019-11155

Improper directory permissions in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access...

CVE-2019-11155

CVE-2019-11155 involves improper directory permissions in Intel PROSet/Wireless WiFi Software before version 21.40, which may allow an authenticated local user to cause denial of service and information disclosure. The issue affects the PROSet/WiFi Software component (and related drivers) and is ...

CVE-2019-11154

The CVE-2019-11154 issue affects Intel PROSet/Wireless WiFi Software (before version 21.40). The vulnerability stems from improper directory permissions, allowing an authenticated user to potentially cause a denial of service and disclosure of information via local access. Affected products inclu...

CVE-2019-11154

Improper directory permissions in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access...

CVE-2019-15468

The CVE-2019-15468 entry concerns the Xiaomi Mi A2 Lite. A pre-installed app with package name com.huaqin.factory (versionCode=1, versionName=QL1715_201812071953) on build xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys enables unauthorized wireless settings modifi...

CVE-2019-15468

The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisysprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app versionCode=1, versionName=QL1715201812071953 that allows unauthorized wireles...

CVE-2019-15467

The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app versionCode=1, versionName=A2060201801032053 that allows unauthorized wireles...

CVE-2019-15467

CVE-2019-15467 affects Xiaomi Mi Mix 2S on Android (build fingerprint Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys). A pre-installed app with package name com.huaqin.factory app (versionCode=1, versionName=A2060_201801032053) allows unauthorized wireless settin...

CVE-2019-15466

CVE-2019-15466 concerns a vulnerability on the Xiaomi Redmi 6 Pro (build fingerprint: xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys). The issue arises from a pre-installed app with package name com.huaqin.factory app that allows unauthorized wireless s...

CVE-2019-15466

The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakuraindia/sakuraindia:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app versionCode=1, versionName=QL1715201812191721 that allows...