Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Priority LOW 25

The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power_5/Power_5:8.1.0/O11019/1532686195:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0033 Published 2019-11-14 No fix listed
Priority MEDIUM 44

The Leagoo P1 device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.wtk.factory (versionCode=1, ve…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02341 Published 2019-04-25 No fix listed
Priority LOW 25

The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains the android framework (i.e., system_server) with a package name of android tha…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00389 Published 2019-04-25 No fix listed CWE-862
Priority LOW 31

The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a hidden root privilege escalation capability to achieve command execution as…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.0073 Published 2018-12-28 No fix listed CWE-78
Priority LOW 35

The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed app with a package name of com.android.messaging (versionCode…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01247 Published 2018-12-28 No fix listed CWE-200
Priority LOW 31

The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.android.settings (ver…

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00347 Published 2018-12-28 No fix listed CWE-862
Priority LOW 35

The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed app with a package name of com.android.messaging (versionCode…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01033 Published 2018-12-28 No fix listed CWE-200
Priority MEDIUM 40

Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.02625 Published 2018-07-13 No fix listed CWE-494