VYPR
← All vendors
Vendor

LAVA

Products
13
CVEs
17
Across products
25
Status
Private

Products

13

Recent CVEs

17
  • CVE-2022-45132CriNov 18, 2022
    Linaro
    Lava
    risk 0.64cvss 9.8epss 0.02

    In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template. The REST API endpoint for validating device configuration files in lava-server loads input as a Jinja2 template in a way that can be…

  • CVE-2017-14003CriOct 11, 2017
    LAVA
    Ether-Serial Link (ESL)
    risk 0.64cvss 9.8epss 0.03

    An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. An improper authentication vulnerability has been identified, which, if exploited, would allow an attacker with the same IP…

  • CVE-2019-15386MedNov 14, 2019
    LAVA
    Z60s
    risk 0.36cvss 5.5epss 0.00

    The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…

  • CVE-2019-15374MedNov 14, 2019
    LAVA
    Iris 88 Lite
    risk 0.36cvss 5.5epss 0.00

    The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app…

  • CVE-2019-15373MedNov 14, 2019
    LAVA
    Symphony i95 Lite
    risk 0.36cvss 5.5epss 0.00

    The Symphony i95 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app…

  • CVE-2019-15369MedNov 14, 2019
    LAVA
    Z61 Turbo
    risk 0.36cvss 5.5epss 0.00

    The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on…

  • CVE-2019-15365MedNov 14, 2019
    LAVA
    Z92
    risk 0.36cvss 5.5epss 0.00

    The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify…

  • CVE-2019-15362MedNov 14, 2019
    LAVA
    iris88_go
    risk 0.36cvss 5.5epss 0.00

    The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on…

  • CVE-2019-15356MedNov 14, 2019
    LAVA
    Flair Z1
    risk 0.36cvss 5.5epss 0.00

    The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…

  • CVE-2019-15339LowNov 14, 2019
    LAVA
    com.android.lava.powersave
    risk 0.21cvss 3.3epss 0.00

    The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the…

  • CVE-2019-15338LowNov 14, 2019
    LAVA
    com.android.lava.powersave
    risk 0.21cvss 3.3epss 0.00

    The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app…

  • CVE-2019-15337LowNov 14, 2019
    LAVA
    Z81
    risk 0.21cvss 3.3epss 0.00

    The Lava Z81 Android device with a build fingerprint of LAVA/Z81/Z81:8.1.0/O11019/1532317309:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.31) that allows any app co-located on the device…

  • CVE-2019-15336LowNov 14, 2019
    LAVA
    com.android.lava.powersave
    risk 0.21cvss 3.3epss 0.00

    The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.31) that allows any app…

  • CVE-2019-15335LowNov 14, 2019
    LAVA
    com.android.lava.powersave
    risk 0.21cvss 3.3epss 0.00

    The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the device…

  • CVE-2019-15334LowNov 14, 2019
    LAVA
    iris88_go
    risk 0.21cvss 3.3epss 0.00

    The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app…

  • CVE-2019-15333LowNov 14, 2019
    LAVA
    Flair Z1
    risk 0.21cvss 3.3epss 0.00

    The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the…

  • CVE-2019-15332LowNov 14, 2019
    LAVA
    com.android.lava.powersave
    risk 0.21cvss 3.3epss 0.00

    The Lava Z61 Android device with a build fingerprint of LAVA/Z61_2GB/Z61_2GB:8.1.0/O11019/1533889281:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (versionCode=400, versionName=v4.0.27) that allows any app co-located on the…