PT-2019-9089 · Qualcomm+2 · Com.Qualcomm.Qti.Telephony.Extcarrierpack+2

Publicado 2019-04-25 · Atualizado 2019-05-02 · CVE-2018-15003

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Coolpad Defiant version 7.1.1 T-Mobile Revvl Plus version 7.1.1

Description The issue concerns a pre-installed platform app with a package name of com.qualcomm.qti.telephony.extcarrierpack that contains an exported broadcast receiver app component named com.qualcomm.qti.telephony.extcarrierpack.UiccReceiver. This component allows any app co-located on the device to programmatically perform a factory reset without requiring any permissions. A factory reset will remove all user data and apps from the device, resulting in the loss of any data that have not been backed up or synced externally.

Recommendations For Coolpad Defiant version 7.1.1, consider disabling the com.qualcomm.qti.telephony.extcarrierpack.UiccReceiver component to prevent unauthorized factory resets. For T-Mobile Revvl Plus version 7.1.1, restrict access to the com.qualcomm.qti.telephony.extcarrierpack app to minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-15003

Produtos afetados

Coolpad Defiant

T-Mobile Revvl Plus

Com.Qualcomm.Qti.Telephony.Extcarrierpack

Referências · 4

• 🔥 https://kryptowire.com/portal/android-firmware-defcon-2018 · Exploit
• https://kryptowire.com · Nota
• https://kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-15003 · Nota de Segurança