CVE-2019-15339 in Z60s

Résumé

par MITRE

The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the device to programmatically disable and enable Wi-Fi without the corresponding access permission through an exported interface.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 22/08/2019
• Modérer: accepté
• Entrée: VDB-145642
• CPE: prêt
• CWE: CWE-732 (confirmé)
• CVSS: 3.3 (NVD)
• EPSS: 0.00248
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-15339
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-15339
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-15339/