PT-2019-17787 · Google+1 · Android+1

Deral Heiland + 1 · Published 2019-05-22 · Updated 2020-10-16 · CVE-2019-5626

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BlueCats Reveal versions prior to 3.0.19

Description The issue allows an attacker to compromise the affected BlueCats network implementation by accessing a clear text file that stores the username and password. This file remains on the device until the user logs out or the session times out after 30 days of inactivity. To exploit this, an attacker would first need to gain physical control of the Android device or compromise it with a malicious app.

Recommendations For versions prior to 3.0.19, update to version 3.0.19 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and implementing additional security measures to prevent unauthorized physical or remote access to the Android device.

Exploit

Fix

Insufficiently Protected Credentials

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-522

CWE-922

Related Identifiers

CVE-2019-5626

Affected Products

Android

Bluecats Reveal

References · 4

• 🔥 https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed · Exploit
• https://osv.dev/vulnerability/CVE-2019-5626 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5626 · Security Note
• https://play.google.com/store/apps/details?id=com.bluecats.bcreveal · Note