PT-2019-17934 · Google · Android Debug Bridge

Masaki Kubo + 1 · Publicado 2019-09-12 · Atualizado 2020-08-24 · CVE-2019-6005

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Smart TV Box firmware versions prior to 1300

Description The issue allows remote attackers to bypass access restrictions, enabling them to conduct arbitrary operations on the device without the user's intent. This can include installing arbitrary software or changing the device settings via the Android Debug Bridge port 5555/TCP.

Recommendations For firmware versions prior to 1300, update to version 1300 or later to resolve the issue. As a temporary workaround, consider restricting access to the Android Debug Bridge port 5555/TCP to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2019-6005

Produtos afetados

Android Debug Bridge

Referências · 3

• http://jvn.jp/en/jp/JVN17127920/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-6005 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6005 · Aviso do Fabricante