PT-2019-17934 · Google · Android Debug Bridge

Masaki Kubo + 1 · Published 2019-09-12 · Updated 2020-08-24 · CVE-2019-6005

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Smart TV Box firmware versions prior to 1300

Description The issue allows remote attackers to bypass access restrictions, enabling them to conduct arbitrary operations on the device without the user's intent. This can include installing arbitrary software or changing the device settings via the Android Debug Bridge port 5555/TCP.

Recommendations For firmware versions prior to 1300, update to version 1300 or later to resolve the issue. As a temporary workaround, consider restricting access to the Android Debug Bridge port 5555/TCP to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2019-6005

Affected Products

Android Debug Bridge

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6005 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6005 · Vendor Advisory
• http://jvn.jp/en/jp/JVN17127920/index.html · Note