VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 14, 2019· Updated Aug 5, 2024

CVE-2019-15393

CVE-2019-15393

Description

The Asus ZenFone Live Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app (versionCode=1, versionName=1) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Asus/ZenFone Livedescription
  • Asus/com.asus.atd.smmitestllm-create
    Range: versionCode=1, versionName=1
  • Asus/Zenfone V Livellm-fuzzy
    Range: build fingerprint asus/WW_Phone/ASUS_X00LD_3:7.1.1/NMF26F/14.0400.1806.203-20180720

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.