deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-11743
Published: 2020-04-14
Description: An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to return 1 instead of a negative value. The grant table code in Linux treats this condition as success, and proceeds with incorrectly initialised state. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to map a grant, it hits the incorrect error path. This will crash a Linux based dom0 or backend domain.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html; http://www.openwall.com/lists/oss-security/2020/04/14/3; http://xenbits.xen.org/xsa/advisory-316.html
CVE: CVE-2020-5738
Published: 2020-04-14
Description: Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://www.tenable.com/security/research/tra-2020-22; https://www.tenable.com/security/research/tra-2020-22
CVE: CVE-2020-5739
Published: 2020-04-14
Description: Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the "Additional Settings" field in the web interface. When the VPN's connection is established, the user defined script is executed with root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://www.tenable.com/security/research/tra-2020-22; https://www.tenable.com/security/research/tra-2020-22
CVE: CVE-2020-4151
Published: 2020-04-14
Description: IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improper input validation. IBM X-Force ID: 174201.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174201; https://www.ibm.com/support/pages/node/6189675; https://exchange.xforce.ibmcloud.com/vulnerabilities/174201
CVE: CVE-2020-9004
Published: 2020-04-14
Description: A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue requests to the administration panel in order to change functionality. For example, a read-only user may activate the Java JMX port in unauthenticated mode and execute OS commands under root privileges. This issue was resolved in Wowza Streaming Engine 4.8.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-9004-Authenticated%20Remote%20Authorization%20Bypass%20Leading%20to%20RCE-Wowza; https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2020-9004.txt; https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes
CVE: CVE-2020-9460
Published: 2020-04-14
Description: Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Guilherme-Rubert/CVE-2020-9460; https://guilhermerubert.com/blog/cve-2020-9461/; https://www.octeth.com/
CVE: CVE-2020-9461
Published: 2020-04-14
Description: Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Guilherme-Rubert/CVE-2020-9461; https://guilhermerubert.com/blog/cve-2020-9460/; https://www.octeth.com/
CVE: CVE-2020-7958
Published: 2020-04-14
Description: An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality that allows a privileged user (root) in the Rich Execution Environment (REE) to obtain bitmap images from the fingerprint sensor because of Leftover Debug Code. The issue is that the Trusted Application (TA) supports an extended number of commands beyond what is needed to implement a fingerprint authentication system compatible with Android. An attacker who is in the position to send commands to the TA (for example, the root user) is able to send a sequence of these commands that will result in the TA sending a raw fingerprint image to the REE. This means that the Trusted Execution Environment (TEE) no longer protects identifiable fingerprint data from the REE.
CVSS Score: 6.0 (MEDIUM)
References: https://www.synopsys.com/blogs/software-security/cve-2020-7958/; https://www.synopsys.com/blogs/software-security/cve-2020-7958/
CVE: CVE-2019-16879
Published: 2020-04-14
Description: The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function (CWE-306) vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or perform other malicious activities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.us-cert.gov/ics/advisories/icsa-20-042-01; https://www.us-cert.gov/ics/advisories/icsa-20-042-01
CVE: CVE-2020-10381
Published: 2020-04-14
Description: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: https://mbconnectline.com/security-advice/; https://mbconnectline.com/security-advice/
CVE: CVE-2020-10382
Published: 2020-04-14
Description: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler.
CVSS Score: 8.8 (HIGH)
References: https://mbconnectline.com/security-advice/; https://mbconnectline.com/security-advice/
CVE: CVE-2020-10383
Published: 2020-04-14
Description: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the com_mb24sysapi module.
CVSS Score: 9.8 (CRITICAL)
References: https://mbconnectline.com/security-advice/; https://mbconnectline.com/security-advice/
CVE: CVE-2020-7800
Published: 2020-04-14
Description: The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability. The affected product is vulnerable to specially crafted TCP packets, which can cause the device to shut down or reboot and lose configuration settings. This is a different issue than CVE-2019-16879, CVE-2019-20045, CVE-2019-20046, CVE-2020-7801, and CVE-2020-7802.
CVSS Score: 8.2 (HIGH)
CWE: CWE-754
References: https://www.us-cert.gov/ics/advisories/icsa-20-042-01; https://www.us-cert.gov/ics/advisories/icsa-20-042-01
CVE: CVE-2020-7801
Published: 2020-04-14
Description: The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) vulnerability. The affected product is vulnerable to information exposure over the SNMP protocol. This is a different issue than CVE-2019-16879, CVE-2019-20045, CVE-2019-20046, CVE-2020-7800, and CVE-2020-7802.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.us-cert.gov/ics/advisories/icsa-20-042-01; https://www.us-cert.gov/ics/advisories/icsa-20-042-01
CVE: CVE-2020-7802
Published: 2020-04-14
Description: The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Incorrect Default Permissions (CWE-276) vulnerability. The affected product is vulnerable to insufficient default permissions, which could allow an attacker to view network configurations through SNMP communication. This is a different issue than CVE-2019-16879, CVE-2019-20045, CVE-2019-20046, CVE-2020-7800, and CVE-2020-7801.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://www.us-cert.gov/ics/advisories/icsa-20-042-01; https://www.us-cert.gov/ics/advisories/icsa-20-042-01
CVE: CVE-2019-18822
Published: 2020-04-14
Description: A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account (i.e., the account under which the program runs - by default, the callrec account) to elevate privileges to root by abusing the callrec-rs@.service. The callrec-rs@.service starts the /opt/callrec/bin/rs binary with root privileges, and this binary is owned by callrec. It can be replaced by a Trojan horse.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-18822-PrivEscal-ZoomCallRecording; https://www.zoomint.com/solutions/call-recording; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-18822-PrivEscal-ZoomCallRecording
CVE: CVE-2020-10384
Published: 2020-04-14
Description: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root account.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://cert.vde.com/de-de/advisories/vde-2021-003; https://mbconnectline.com/security-advice/; https://cert.vde.com/de-de/advisories/vde-2021-003
CVE: CVE-2018-6402
Published: 2020-04-14
Description: Ecobee Ecobee4 4.2.0.171 devices can be forced to deauthenticate and connect to an unencrypted Wi-Fi network with the same SSID, even if the device settings specify use of encryption such as WPA2, as long as the competing network has a stronger signal. An attacker must be able to set up a nearby SSID, similar to an "Evil Twin" attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://garrettmiller.github.io/meross-mss110-vuln/; https://garrettmiller.github.io/meross-mss110-vuln/
CVE: CVE-2019-14326
Published: 2020-04-14
Description: An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and ssh (ports 22 and 23) with root privileges in the emulated Android system. This can be exploited by remote attackers to gain full access to the device, or by malicious apps installed inside the emulator to perform privilege escalation from a normal user to root (unlike with standard methods of getting root privileges on Android - e.g., the SuperSu program - the user is not asked for consent). There is no authentication performed - access to a root shell is given upon a successful connection. NOTE: although this was originally published with a slightly different CVE ID number, the correct ID for this Andy vulnerability has always been CVE-2019-14326.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://github.com/seqred-s-a/cve-2019-14326; https://seqred.pl/en/cve-privilege-escalation-in-andy/; https://github.com/seqred-s-a/cve-2019-14326
CVE: CVE-2020-6214
Published: 2020-04-14
Description: SAP S/4HANA (Financial Products Subledger), version 100, uses an incorrect authorization object in some reports. Although the affected reports are protected with other authorization objects, exploitation of the vulnerability would allow an authenticated attacker to view, change, or delete data, thereby preventing the proper segregation of duties in the system.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://launchpad.support.sap.com/#/notes/2897612; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2897612
CVE: CVE-2020-6216
Published: 2020-04-14
Description: SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2876059; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2876059
CVE: CVE-2020-6218
Published: 2020-04-14
Description: Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to access information that should otherwise be restricted, leading to Information Disclosure.
CVSS Score: 5.0 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2878507; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2878507
CVE: CVE-2020-6219
Published: 2020-04-14
Description: SAP Business Objects Business Intelligence Platform (CrystalReports WebForm Viewer), versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic authorization to perform deserialization attack in the application, leading to service interruptions and denial of service and unauthorized execution of arbitrary commands, leading to Deserialization of Untrusted Data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://launchpad.support.sap.com/#/notes/2863731; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2863731
CVE: CVE-2020-6221
Published: 2020-04-14
Description: Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2878507; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2878507
CVE: CVE-2020-6222
Published: 2020-04-14
Description: SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2880804; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2880804
CVE: CVE-2020-6223
Published: 2020-04-14
Description: The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modify certain error pages to include malicious content. This can misdirect a user who is tricked into accessing these error pages rendered by the application, leading to Content Spoofing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://launchpad.support.sap.com/#/notes/2878507; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2878507
CVE: CVE-2020-6224
Published: 2020-04-14
Description: SAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with login credentials, leading to Information Disclosure.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-532
References: https://launchpad.support.sap.com/#/notes/2826528; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2826528
CVE: CVE-2020-6226
Published: 2020-04-14
Description: SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2879132; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2879132
CVE: CVE-2020-6227
Published: 2020-04-14
Description: SAP Business Objects Business Intelligence Platform (CMS / Auditing issues), version 4.2, allows attacker to send specially crafted GIOP packets to several services due to Improper Input Validation, allowing to forge additional entries in GLF log files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-116
References: https://launchpad.support.sap.com/#/notes/2863396; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2863396
CVE: CVE-2020-6228
Published: 2020-04-14
Description: SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-354
References: https://launchpad.support.sap.com/#/notes/2866752; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2866752
CVE: CVE-2020-6229
Published: 2020-04-14
Description: SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2900374; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2900374
CVE: CVE-2020-6230
Published: 2020-04-14
Description: SAP OrientDB, version 3.0, allows an authenticated attacker with script execute/write permissions to inject code that can be executed by the application and lead to Code Injection. An attacker could thereby control the behavior of the application.
CVSS Score: 7.2 (HIGH)
References: https://launchpad.support.sap.com/#/notes/2900118; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2900118
CVE: CVE-2020-6231
Published: 2020-04-14
Description: SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2879132; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2879132
CVE: CVE-2020-6232
Published: 2020-04-14
Description: SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2888556; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2888556
CVE: CVE-2020-6233
Published: 2020-04-14
Description: SAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500 and S4FPSL 100, allows an authenticated user to run an analysis report due to Missing Authorization Check, resulting in slowing the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2904796; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2904796
CVE: CVE-2020-6234
Published: 2020-04-14
Description: SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.
CVSS Score: 7.2 (HIGH)
References: http://packetstormsecurity.com/files/162084/SAP-Host-Control-Local-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2021/Apr/5; https://launchpad.support.sap.com/#/notes/2902645
CVE: CVE-2020-6235
Published: 2020-04-14
Description: SAP Solution Manager (Diagnostics Agent), version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication.
CVSS Score: 8.6 (HIGH)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/2906994; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2906994
CVE: CVE-2020-6236
Published: 2020-04-14
Description: SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admin_group privileges to change ownership and permissions (including S-user ID bit s-bit) of arbitrary files remotely. This results in the possibility to execute these files as root user from a non-root context, leading to Privilege Escalation.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://launchpad.support.sap.com/#/notes/2902456; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2902456
CVE: CVE-2020-6237
Published: 2020-04-14
Description: Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.
CVSS Score: 7.5 (HIGH)
References: https://launchpad.support.sap.com/#/notes/2898077; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2898077
CVE: CVE-2020-6238
Published: 2020-04-14
Description: SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the Rest API from Servlet xyformsweb, leading to Missing XML Validation. This affects confidentiality and availability (partially) of SAP Commerce.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-611
References: https://launchpad.support.sap.com/#/notes/2904480; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202; https://launchpad.support.sap.com/#/notes/2904480
CVE: CVE-2019-10939
Published: 2020-04-14
Description: A vulnerability has been identified in TIM 3V-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE Advanced (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.3), TIM 4R-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 4R-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.3). The affected versions contain an open debug port that is available under certain specific conditions. The vulnerability is only available if the IP address is configured to 192.168.1.2. If available, the debug port could be exploited by an attacker with network access to the device. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-489
References: https://cert-portal.siemens.com/productcert/pdf/ssa-359303.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-359303.pdf
CVE: CVE-2020-11723
Published: 2020-04-14
Description: Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when performing a forensic extraction.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798
References: http://packetstormsecurity.com/files/157217/Cellebrite-UFED-7.29-Hardcoded-ADB-Authentication-Keys.html; https://www.cellebrite.com/en/productupdates/ufed-and-ufed-infield-7-30-provides-new-support-for-smartphones-with-huawei-kirin-processor/; http://packetstormsecurity.com/files/157217/Cellebrite-UFED-7.29-Hardcoded-ADB-Authentication-Keys.html