CVE-2018-15004

The Coolpad Canvas device with a build fingerprint of Coolpad/cp3636a/cp3636a:7.0/NRD90M/093031423:user/release-keys contains a platform app with a package name of com.qualcomm.qti.modemtestmode (versionCode=24, versionName=7.0) that contains an exported service app component named com.qualcomm.qti.modemtestmode.MbnTestService that allows any app on the device to set certain system properties as the com.android.phone user. When an app sets the persist.service.logr.enable system property to a value of 1, an app with a package name of com.yulong.logredirect (versionCode=20160622, versionName=5.25_20160622_01) will start writing the system-wide logcat log, kernel log, and a tcpdump network traffic capture to external storage. Furthermore, on the Coolpad Canvas device, the com.android.phone app writes the destination phone number and body of the text message for outgoing text messages. A notification when logging can be avoided if the log is enabled after device startup and disabled prior to device shutdown by setting the system properties using the exported interface of the com.qualcomm.qti.modemtestmode app. Any app with the READ_EXTERNAL_STORAGE permission can access the log files.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:coolpad:canvas_firmware:7.0:*:*:*:*:*:*:*
cpe:2.3:h:coolpad:canvas:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:50

Type Values Removed Values Added
References () https://www.kryptowire.com/portal/android-firmware-defcon-2018/ - Exploit, Third Party Advisory () https://www.kryptowire.com/portal/android-firmware-defcon-2018/ - Exploit, Third Party Advisory
References () https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf - Exploit, Third Party Advisory () https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf - Exploit, Third Party Advisory

Information

Published : 2018-12-28 21:29

Updated : 2024-11-21 03:50


NVD link : CVE-2018-15004

Mitre link : CVE-2018-15004

CVE.ORG link : CVE-2018-15004


JSON object : View

Products Affected

coolpad

  • canvas_firmware
  • canvas
CWE
CWE-532

Insertion of Sensitive Information into Log File