Read the docs

Leagoo

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Leagoo records in CISA KEV

No Leagoo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
P1 Firmware 3 records MEDIUM Z5c Firmware 3 records LOW Alfa 6 Firmware 1 record MEDIUM Lead 2s Firmware 1 record MEDIUM Lead 3i Firmware 1 record MEDIUM Lead 5 Firmware 1 record MEDIUM Lead 6 Firmware 1 record MEDIUM Power 5 Firmware 1 record LOW

Records

8 records

TI-2018-10805 CVE-2018-14999 · GHSA-hfr6-3rjr-jmhf

The Leagoo P1 device with a build fingerprint of…

Priority MEDIUM 44

The Leagoo P1 device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.wtk.factory (versionCode=1, ve…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02341 Published 2019-04-25 No fix listed
TI-2016-05628 CVE-2016-6564 · GHSA-cp5q-fwmj-pjgc

Access control flaw in Ragentek Android software

Priority MEDIUM 40

Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.02625 Published 2018-07-13 No fix listed CWE-494
TI-2018-10792 CVE-2018-14986 · GHSA-355x-p35f-mgjw

The Leagoo Z5C Android device with a build fingerprint of…

Priority LOW 35

The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed app with a package name of com.android.messaging (versionCode…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01247 Published 2018-12-28 No fix listed CWE-200
TI-2018-10790 CVE-2018-14984 · GHSA-r9w8-v8hh-7577

The Leagoo Z5C Android device with a build fingerprint of…

Priority LOW 35

The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed app with a package name of com.android.messaging (versionCode…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01033 Published 2018-12-28 No fix listed CWE-200
TI-2018-10804 CVE-2018-14998 · GHSA-c93g-m344-2c3f

The Leagoo P1 Android device with a build fingerprint of…

Priority LOW 31

The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a hidden root privilege escalation capability to achieve command execution as…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.0073 Published 2018-12-28 No fix listed CWE-78
TI-2018-10791 CVE-2018-14985 · GHSA-9qj5-w88r-c7v6

The Leagoo Z5C Android device with a build fingerprint of…

Priority LOW 31

The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.android.settings (ver…

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00347 Published 2018-12-28 No fix listed CWE-862
TI-2019-11467 CVE-2019-15363 · GHSA-7mjf-4664-cj6h

The Leagoo Power 5 Android device with a build fingerprint of…

Priority LOW 25

The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power_5/Power_5:8.1.0/O11019/1532686195:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0033 Published 2019-11-14 No fix listed
TI-2018-10803 CVE-2018-14997 · GHSA-pqvj-x396-97jj

The Leagoo P1 Android device with a build fingerprint of…

Priority LOW 25

The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains the android framework (i.e., system_server) with a package name of android tha…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00389 Published 2019-04-25 No fix listed CWE-862
Open these records in search →