Details of VAR-201904-0572

ID

VAR-201904-0572

CVE

CVE-2018-15003

TITLE

Coolpad Defiant and T-Mobile Revvl Plus Input validation vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-015337

DESCRIPTION

The Coolpad Defiant (Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys) and the T-Mobile Revvl Plus (Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildf_nj_02-206:user/release-keys) Android devices contain a pre-installed platform app with a package name of com.qualcomm.qti.telephony.extcarrierpack (versionCode=25, versionName=7.1.1) containing an exported broadcast receiver app component named com.qualcomm.qti.telephony.extcarrierpack.UiccReceiver that allows any app co-located on the device to programmatically perform a factory reset. In addition, the app initiating the factory reset does not require any permissions. A factory reset will remove all user data and apps from the device. This will result in the loss of any data that have not been backed up or synced externally. The capability to perform a factory reset is not directly available to third-party apps (those that the user installs themselves with the exception of enabled Mobile Device Management (MDM) apps), although this capability can be obtained by leveraging an unprotected app component of a pre-installed platform app. Coolpad Defiant and T-Mobile Revvl Plus Contains an input validation vulnerability.Information may be tampered with. Yulong Computer Communication Technology Coolpad Defiant is an Android-based smart phone produced by China Yulong Computer Communication Technology Company. T-Mobile Revvl Plus is a smart phone based on the Android platform of T-Mobile in Germany. Attackers can use this vulnerability to restore factory settings without permission, resulting in data loss

Trust: 1.71

sources: NVD: CVE-2018-15003 // JVNDB: JVNDB-2018-015337 // VULHUB: VHN-125219

AFFECTED PRODUCTS

vendor:	coolpad	model:	defiant	scope:	eq	version:	-	Trust: 1.0
vendor:	t mobile	model:	revvl plus	scope:	eq	version:	-	Trust: 1.0
vendor:	coolpad	model:	defiant	scope:	-	version:	-	Trust: 0.8
vendor:	t mobile	model:	revvl plus	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2018-015337 // NVD: CVE-2018-15003

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-15003
value:	HIGH
Trust: 1.0
NVD:	CVE-2018-15003
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201904-1187
value:	HIGH
Trust: 0.6
VULHUB:	VHN-125219
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2018-15003
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-125219
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-15003
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-125219 // JVNDB: JVNDB-2018-015337 // CNNVD: CNNVD-201904-1187 // NVD: CVE-2018-15003

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.9

sources: VULHUB: VHN-125219 // JVNDB: JVNDB-2018-015337 // NVD: CVE-2018-15003

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-201904-1187

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-015337

PATCH

title:	Top Page	url:	https://coolpad.us/	Trust: 0.8
title:	Top Page	url:	https://www.t-mobile.com/	Trust: 0.8

sources: JVNDB: JVNDB-2018-015337

EXTERNAL IDS

db:	NVD	id:	CVE-2018-15003	Trust: 2.5
db:	JVNDB	id:	JVNDB-2018-015337	Trust: 0.8
db:	CNNVD	id:	CNNVD-201904-1187	Trust: 0.7
db:	VULHUB	id:	VHN-125219	Trust: 0.1

sources: VULHUB: VHN-125219 // JVNDB: JVNDB-2018-015337 // CNNVD: CNNVD-201904-1187 // NVD: CVE-2018-15003

REFERENCES

url:	https://www.kryptowire.com/portal/android-firmware-defcon-2018/	Trust: 1.7
url:	https://www.kryptowire.com/portal/wp-content/uploads/2018/12/defcon-26-johnson-and-stavrou-vulnerable-out-of-the-box-an-eval-of-android-carrier-devices-wp-updated.pdf	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2018-15003	Trust: 1.4
url:	https://www.kryptowire.com	Trust: 1.1
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-15003	Trust: 0.8

sources: VULHUB: VHN-125219 // JVNDB: JVNDB-2018-015337 // CNNVD: CNNVD-201904-1187 // NVD: CVE-2018-15003

SOURCES

db:	VULHUB	id:	VHN-125219
db:	JVNDB	id:	JVNDB-2018-015337
db:	CNNVD	id:	CNNVD-201904-1187
db:	NVD	id:	CVE-2018-15003

LAST UPDATE DATE

2024-11-23T22:30:03.467000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-125219	date:	2019-05-02T00:00:00
db:	JVNDB	id:	JVNDB-2018-015337	date:	2019-05-28T00:00:00
db:	CNNVD	id:	CNNVD-201904-1187	date:	2019-04-26T00:00:00
db:	NVD	id:	CVE-2018-15003	date:	2024-11-21T03:50:19.760

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-125219	date:	2019-04-25T00:00:00
db:	JVNDB	id:	JVNDB-2018-015337	date:	2019-05-28T00:00:00
db:	CNNVD	id:	CNNVD-201904-1187	date:	2019-04-25T00:00:00
db:	NVD	id:	CVE-2018-15003	date:	2019-04-25T20:29:01.663