deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15346
Published: 2019-11-14
Description: The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.service.FunctionService that allows any app co-located on the device to supply the file path to a Dalvik Executable (DEX) file which it will dynamically load within its own process and execute in with its own system privileges. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing code as the system user can allow a third-party app to factory reset the device, obtain the user's Wi-Fi passwords, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15347
Published: 2019-11-14
Description: The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.FontCoverService that allows any app co-located on the device to supply arbitrary commands via shell script to be executed as the system user that are triggered by writing an attacker-selected message to the logcat log. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing commands as the system user can allow a third-party app to factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15348
Published: 2019-11-14
Description: The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.FontCoverService that allows any app co-located on the device to supply arbitrary commands via shell script to be executed as the system user that are triggered by writing an attacker-selected message to the logcat log. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing commands as the system user can allow a third-party app to factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15349
Published: 2019-11-14
Description: The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.service.FunctionService that allows any app co-located on the device to supply the file path to a Dalvik Executable (DEX) file which it will dynamically load within its own process and execute in with its own system privileges. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing code as the system user can allow a third-party app to factory reset the device, obtain the user's Wi-Fi passwords, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15350
Published: 2019-11-14
Description: The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.service.FunctionService that allows any app co-located on the device to supply the file path to a Dalvik Executable (DEX) file which it will dynamically load within its own process and execute in with its own system privileges. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing code as the system user can allow a third-party app to factory reset the device, obtain the user's Wi-Fi passwords, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15351
Published: 2019-11-14
Description: The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.FontCoverService that allows any app co-located on the device to supply arbitrary commands via shell script to be executed as the system user that are triggered by writing an attacker-selected message to the logcat log. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing commands as the system user can allow a third-party app to factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15352
Published: 2019-11-14
Description: The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/[PII_REDACTED]:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15353
Published: 2019-11-14
Description: The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15354
Published: 2019-11-14
Description: The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/Ulefone_Armor_5/Ulefone_Armor_5:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15355
Published: 2019-11-14
Description: The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15356
Published: 2019-11-14
Description: The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15357
Published: 2019-11-14
Description: The Advan i6A Android device with a build fingerprint of ADVAN/i6A/i6A:8.1.0/O11019/[PII_REDACTED]:userdebug/test-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15358
Published: 2019-11-14
Description: The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15359
Published: 2019-11-14
Description: The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/[PII_REDACTED]:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15360
Published: 2019-11-14
Description: The Hisense U965 Android device with a build fingerprint of Hisense/U965_4G_10/HS6739MT:8.1.0/O11019/Hisense_U965_4G_10_S01:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15361
Published: 2019-11-14
Description: The Infinix Note 5 Android device with a build fingerprint of Infinix/H632C/Infinix-X605_sprout:8.1.0/O11019/CE-180914V59:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15362
Published: 2019-11-14
Description: The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15363
Published: 2019-11-14
Description: The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power_5/Power_5:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15364
Published: 2019-11-14
Description: The Dexp BL250 Android device with a build fingerprint of DEXP/BL250/BL250:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15365
Published: 2019-11-14
Description: The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15366
Published: 2019-11-14
Description: The Infinix Note 5 Android device with a build fingerprint of Infinix/H633IJL/Infinix-X604_sprout:8.1.0/O11019/IJL-180531V181:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15367
Published: 2019-11-14
Description: The Haier P10 Android device with a build fingerprint of Haier/P10/P10:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15368
Published: 2019-11-14
Description: The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/[PII_REDACTED]:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15369
Published: 2019-11-14
Description: The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15370
Published: 2019-11-14
Description: The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15371
Published: 2019-11-14
Description: The Symphony G100 Android device with a build fingerprint of Symphony/G100/G100:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15372
Published: 2019-11-14
Description: The Hisense F17 Android device with a build fingerprint of Hisense/F17_4G/HS6739MT:8.1.0/O11019/Hisense_F17_4G_00_S01:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15373
Published: 2019-11-14
Description: The Symphony i95 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15374
Published: 2019-11-14
Description: The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15375
Published: 2019-11-14
Description: The Haier G8 Android device with a build fingerprint of Haier/HM-G559-FL/G8:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/
CVE: CVE-2019-15376
Published: 2019-11-14
Description: The Panasonic Eluga Ray 530 Android device with a build fingerprint of Panasonic/ELUGA_Ray_530/ELUGA_Ray_530:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://mobile.panasonic.com/in/advisory; https://www.kryptowire.com/android-firmware-2019/; https://mobile.panasonic.com/in/advisory
CVE: CVE-2019-15377
Published: 2019-11-14
Description: The Cherry Flare S7 Android device with a build fingerprint of Cherry_Mobile/Flare_S7_Deluxe/Flare_S7_Deluxe:8.1.0/O11019/[PII_REDACTED]:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
CVSS Score: 5.5 (MEDIUM)
References: https://www.kryptowire.com/android-firmware-2019/; https://www.kryptowire.com/android-firmware-2019/