PT-2019-14107
CVE-2019-15378
·
Published
2019-11-14
·
Updated
2020-08-24
Description by
CVSS 2.0
2.1
LowMetricsAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGA Ray 600/ELUGA Ray 600:8.1.0/O11019/1532692680:user/release-keys
Description
The issue concerns a pre-installed app with a package name of
com.mediatek.wfo.impl that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.Recommendations
For the Panasonic Eluga Ray 600 Android device, consider restricting access to the
com.mediatek.wfo.impl app to minimize the risk of exploitation until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾