Vulnerabilities

TI-2019-12223 CVE-2019-16241 · GHSA-qg5g-43r3-8gpr

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by…

LOW 31

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00478 Published 2019-11-26 No fix listed CWE-668

TI-2019-12225 CVE-2019-16243 · GHSA-c4hf-6r23-8vgr

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that…

LOW 29

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows unprivileged JavaScript, including JavaScript running within the KaiOS browser, to view and edit the device's firmware over-the…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00746 Published 2019-11-26 No fix listed CWE-306

TI-2019-12224 CVE-2019-16242 · GHSA-vxw8-3jmr-prjr

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an engineering application named…

LOW 32

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an engineering application named omamock that is vulnerable to OS command injection.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01123 Published 2019-11-26 No fix listed CWE-78

Vulnerabilities

Filters

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by…

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that…

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an engineering application named…