Vulnerability-Lookup

CNVD-2020-22864

Vulnerability from cnvd - Published: 2020-04-14

Title

传音Tecno Camon iAir 2Plus代码执行漏洞

Description

传音 Tecno Camon iAir 2 Plus是中国传音公司的一款智能手机。传音 Tecno Camon iAir 2 Plus（build fingerprint：TECNO/H622/TECNO-ID3k：8.1.0/O11019/E-180914V83：user/release-keys）中的com.lovelyfont.defcontainer存在安全漏洞。攻击者可利用该漏洞以系统权限执行代码或命令，进而进行录屏，恢复出厂设置，获取用户Wi-Fi密码，读取logcat日志，向GUI注入事件或修改默认的Input Method Editor，获取用户通知及短信消息等。

Severity

低

Formal description

目前厂商暂未发布修复措施解决此安全问题，建议使用此软件的用户随时关注厂商主页或参考网址以获取解决办法：

https://www.tecno-mobile.com/

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-15342

Impacted products

Name
Tecno Camon iAir 2 Plus（build fingerprint：TECNO/H622/TECNO-ID3k：8.1.0/O11019/E-180914V83：user/release-keys）

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-15342",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-15342"
    }
  },
  "description": "\u4f20\u97f3 Tecno Camon iAir 2 Plus\u662f\u4e2d\u56fd\u4f20\u97f3\u516c\u53f8\u7684\u4e00\u6b3e\u667a\u80fd\u624b\u673a\u3002\n\n\u4f20\u97f3 Tecno Camon iAir 2 Plus\uff08build fingerprint\uff1aTECNO/H622/TECNO-ID3k\uff1a8.1.0/O11019/E-180914V83\uff1auser/release-keys\uff09\u4e2d\u7684com.lovelyfont.defcontainer\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5\u7cfb\u7edf\u6743\u9650\u6267\u884c\u4ee3\u7801\u6216\u547d\u4ee4\uff0c\u8fdb\u800c\u8fdb\u884c\u5f55\u5c4f\uff0c\u6062\u590d\u51fa\u5382\u8bbe\u7f6e\uff0c\u83b7\u53d6\u7528\u6237Wi-Fi\u5bc6\u7801\uff0c\u8bfb\u53d6logcat\u65e5\u5fd7\uff0c\u5411GUI\u6ce8\u5165\u4e8b\u4ef6\u6216\u4fee\u6539\u9ed8\u8ba4\u7684Input Method Editor\uff0c\u83b7\u53d6\u7528\u6237\u901a\u77e5\u53ca\u77ed\u4fe1\u6d88\u606f\u7b49\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u6682\u672a\u53d1\u5e03\u4fee\u590d\u63aa\u65bd\u89e3\u51b3\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u5efa\u8bae\u4f7f\u7528\u6b64\u8f6f\u4ef6\u7684\u7528\u6237\u968f\u65f6\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u6216\u53c2\u8003\u7f51\u5740\u4ee5\u83b7\u53d6\u89e3\u51b3\u529e\u6cd5\uff1a\r\n\r\nhttps://www.tecno-mobile.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-22864",
  "openTime": "2020-04-14",
  "products": {
    "product": "Tecno Camon iAir 2 Plus\uff08build fingerprint\uff1aTECNO/H622/TECNO-ID3k\uff1a8.1.0/O11019/E-180914V83\uff1auser/release-keys\uff09"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-15342",
  "serverity": "\u4f4e",
  "submitTime": "2019-12-17",
  "title": "\u4f20\u97f3Tecno Camon iAir 2Plus\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

CVE-2019-15342 (GCVE-0-2019-15342)

Vulnerability from cvelistv5 – Published: 2019-11-14 16:24 – Updated: 2024-08-05 00:42

Summary

The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.FontCoverService that allows any app co-located on the device to supply arbitrary commands via shell script to be executed as the system user that are triggered by writing an attacker-selected message to the logcat log. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing commands as the system user can allow a third-party app to factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

https://www.kryptowire.com/android-firmware-2019/

x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:42:04.022Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kryptowire.com/android-firmware-2019/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.FontCoverService that allows any app co-located on the device to supply arbitrary commands via shell script to be executed as the system user that are triggered by writing an attacker-selected message to the logcat log. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user\u0027s screen, factory reset the device, obtain the user\u0027s notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user\u0027s text messages, and more. Executing commands as the system user can allow a third-party app to factory reset the device, obtain the user\u0027s notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user\u0027s text messages, and more."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-14T16:24:38.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kryptowire.com/android-firmware-2019/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-15342",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.FontCoverService that allows any app co-located on the device to supply arbitrary commands via shell script to be executed as the system user that are triggered by writing an attacker-selected message to the logcat log. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user\u0027s screen, factory reset the device, obtain the user\u0027s notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user\u0027s text messages, and more. Executing commands as the system user can allow a third-party app to factory reset the device, obtain the user\u0027s notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user\u0027s text messages, and more."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.kryptowire.com/android-firmware-2019/",
              "refsource": "MISC",
              "url": "https://www.kryptowire.com/android-firmware-2019/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-15342",
    "datePublished": "2019-11-14T16:24:38.000Z",
    "dateReserved": "2019-08-22T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:42:04.022Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2020-22864

CVE-2019-15342 (GCVE-0-2019-15342)

Tags

Sightings

Nomenclature