PT-2019-14364
CVE-2019-15744
·
تاريخ النشر
2019-11-14
·
تاريخ التحديث
2019-11-19
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Sony Xperia XZs Android device with a build fingerprint of Sony/keyaki softbank/keyaki softbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys
jp.softbank.mb.tdrl app version 1.3.0
Description
The issue allows unauthorized modification of wireless settings via a confused deputy attack. This capability can be accessed by any app co-located on the device.
Recommendations
For the Sony Xperia XZs Android device, consider restricting access to the jp.softbank.mb.tdrl app until a patch is available.
For the jp.softbank.mb.tdrl app version 1.3.0, avoid using the app for sensitive operations until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾