PT-2019-14107

CVE-2019-15378

·

Publicado

2019-11-14

·

Atualizado

2020-08-24

Descrição por

CVSS 2.0
2.1
Baixa
MétricasAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGA Ray 600/ELUGA Ray 600:8.1.0/O11019/1532692680:user/release-keys
Description The issue concerns a pre-installed app with a package name of com.mediatek.wfo.impl that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
Recommendations For the Panasonic Eluga Ray 600 Android device, consider restricting access to the com.mediatek.wfo.impl app to minimize the risk of exploitation until a patch is available.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾