CVE-2019-14758

An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed File Manager application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a file via email to the victim that will inject HTML into the File Manager application (assuming the victim chooses to download the email attachment). At a bare minimum, this allows an attacker to take control over the File Manager application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application.

CVSS v3 6.1 MEDIUM
CVSS v2.0 4.3 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://research.nccgroup.com/2020/08/21/technical-advisory-multiple-html-injection-vulnerabilities-in-kaios-pre-installed-mobile-applications/	Third Party Advisory
https://www.nccgroup.trust/us/our-research/	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:kaiostech:kaios:2.5:::::::*
	cpe:2.3:o:kaiostech:kaios:2.5.1:::::::*

History

No history.

Information

Published : 2020-09-14 20:15

Updated : 2024-02-28 17:47

NVD link : CVE-2019-14758

Mitre link : CVE-2019-14758

CVE.ORG link : CVE-2019-14758

JSON object : View

Products Affected

kaiostech

kaios

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2019-14758", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2020-09-14T20:15:10.500", "references": [{"url": "https://research.nccgroup.com/2020/08/21/technical-advisory-multiple-html-injection-vulnerabilities-in-kaios-pre-installed-mobile-applications/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.nccgroup.trust/us/our-research/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed File Manager application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a file via email to the victim that will inject HTML into the File Manager application (assuming the victim chooses to download the email attachment). At a bare minimum, this allows an attacker to take control over the File Manager application's UI (e.g., display a malicious prompt to the user asking them to re-enter credentials such as their KaiOS credentials to continue using the application) and also allows an attacker to abuse any of the privileges available to the mobile application."}, {"lang": "es", "value": "Se detect\u00f3 un problema en KaiOS versiones 2.5 y 2.5.1. La aplicaci\u00f3n File Manager preinstalada es vulnerable a ataques de inyecci\u00f3n de HTML y JavaScript. Un atacante puede enviar un archivo por correo electr\u00f3nico a la v\u00edctima que inyectar\u00e1 HTML en la aplicaci\u00f3n File Manager (asumiendo que la v\u00edctima elige descargar el archivo adjunto del correo electr\u00f3nico). Como m\u00ednimo, esto permite a un atacante tomar el control de la Interfaz de Usuario de la aplicaci\u00f3n File Manager (por ejemplo, mostrar un mensaje malicioso al usuario pidi\u00e9ndole que vuelva a ingresar sus credenciales, tal y como sus credenciales KaiOS, para continuar usando la aplicaci\u00f3n) y tambi\u00e9n permite a un atacante abusar de cualquiera de los privilegios disponibles para la aplicaci\u00f3n m\u00f3vil"}], "lastModified": "2020-09-17T15:04:58.263", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:kaiostech:kaios:2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B68C183-6100-498C-BEB8-CC96A59C8213"}, {"criteria": "cpe:2.3:o:kaiostech:kaios:2.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "833E113E-0E23-41F7-94D2-3EF0495ED0B3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}