Priority LOW 25
The Leagoo Power 5 Android device with a build fingerprint of LEAGOO/Power_5/Power_5:8.1.0/O11019/1532686195:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2019-11-14 · No fix listed
Priority MEDIUM 44
The Leagoo P1 device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.wtk.factory (versionCode=1, ve…
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02341 · Published 2019-04-25 · No fix listed
Priority LOW 25
The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains the android framework (i.e., system_server) with a package name of android tha…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00389 · Published 2019-04-25 · No fix listed CWE-862
Priority LOW 31
The Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a hidden root privilege escalation capability to achieve command execution as…
CVSS 3.0MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0073 · Published 2018-12-28 · No fix listed CWE-78
Priority LOW 35
The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed app with a package name of com.android.messaging (versionCode…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01247 · Published 2018-12-28 · No fix listed CWE-200
Priority LOW 31
The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed platform app with a package name of com.android.settings (ver…
CVSS 3.0HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00347 · Published 2018-12-28 · No fix listed CWE-862
Priority LOW 35
The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a pre-installed app with a package name of com.android.messaging (versionCode…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01033 · Published 2018-12-28 · No fix listed CWE-200
Priority MEDIUM 40
Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.02625 · Published 2018-07-13 · No fix listed CWE-494