Unrated severityNVD Advisory· Published Nov 14, 2019· Updated Aug 5, 2024
CVE-2019-15466
CVE-2019-15466
Description
The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1715_201812191721) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- huaqin/factorydescription
- Range: = QL1715_201812191721
- Range: build V10.2.6.0.ODMMIXM
Patches
Vulnerability mechanics
References
1- www.kryptowire.com/android-firmware-2019/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.