PT-2019-9080 · Plum+1 · Plum Compass+1

Publicado 2019-04-25 · Atualizado 2019-05-02 · CVE-2018-14989

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Plum Compass Android device with a build fingerprint of PLUM/c179 hwf 221/c179 hwf 221:6.0/MRA58K/W16.51.5-22:user/release-keys

Description The issue concerns a pre-installed platform app with a package name of com.android.settings that contains an exported broadcast receiver app component. This component allows any app co-located on the device to programmatically perform a factory reset without requiring any permissions. As a result, all user data and apps will be removed from the device, leading to data loss if not backed up or synced externally.

Recommendations For the Plum Compass Android device with the specified build fingerprint, consider disabling the com.android.settings app component to prevent unauthorized factory resets until a patch is available. Restrict access to the device to minimize the risk of exploitation. Avoid using apps that may leverage the unprotected app component of the pre-installed platform app.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-14989

Produtos afetados

Android

Plum Compass

Referências · 4

• 🔥 https://kryptowire.com/portal/android-firmware-defcon-2018 · Exploit
• https://kryptowire.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-14989 · Nota de Segurança
• https://kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf · Nota