PT-2018-12867 · Leagoo+1 · Leagoo P1+1

Published 2018-12-28 · Updated 2019-10-03 · CVE-2018-14998

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Leagoo P1 Android device with a build fingerprint of sp7731c 1h10 32v4 bird:6.0/MRA58K/android.20170629.214736:user/release-keys

Description The issue allows for command execution as the root user due to a hidden root privilege escalation capability. A user with physical access to the device can obtain a root shell via ADB by modifying read-only system properties at runtime, specifically the ro.debuggable and the ro.secure system properties, and then restarting the ADB daemon.

Recommendations For the Leagoo P1 Android device with the specified build fingerprint, consider restricting physical access to the device to minimize the risk of exploitation. As a temporary workaround, avoid modifying the ro.debuggable and ro.secure system properties to prevent potential root shell access via ADB. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-14998

Affected Products

Android

Leagoo P1

References · 3

• 🔥 https://kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14998 · Security Note
• https://kryptowire.com/portal/android-firmware-defcon-2018 · Note