CNVD-2015-04127
Vulnerability from cnvd - Published: 2015-06-29
VLAI Severity ?
Title
nubia z7手机本地拒绝服务漏洞
Description
中兴nubia z7系列手机系统内置应用cn.nubia.factory存在一个未加保护的广播接收器
cn.nubia.factory.service.FactoryResetReciver，本地恶意不需要任何安卓权限即可向该广播接收器发送恶意广播，在无需人工干预的情况下，即可造成安卓系统对外部存储SD卡进行格式化，清除所有用户数据，恢复出厂设置，并重启手机。
Severity
中
Patch Name
nubia z7手机存在本地拒绝服务漏洞
Patch Description
发送至psirt@zte.com.cn，抄送：ping.li@zte.com.cn邮箱中处置。
Formal description
设置cn.nubia.factory.service.FactoryResetReciver为非导出状态，或者通过权限保护
Impacted products
| Name | ['深圳市中兴移动通信有限公司 nubia z7 Android 4.4.2', '深圳市中兴移动通信有限公司 nubia z7 UI V14.12.20'] |
|---|
{
"description": "\u4e2d\u5174nubia z7\u7cfb\u5217\u624b\u673a\u7cfb\u7edf\u5185\u7f6e\u5e94\u7528cn.nubia.factory\u5b58\u5728\u4e00\u4e2a\u672a\u52a0\u4fdd\u62a4\u7684\u5e7f\u64ad\u63a5\u6536\u5668\r\ncn.nubia.factory.service.FactoryResetReciver\uff0c\u672c\u5730\u6076\u610f\u4e0d\u9700\u8981\u4efb\u4f55\u5b89\u5353\u6743\u9650\u5373\u53ef\u5411\u8be5\u5e7f\u64ad\u63a5\u6536\u5668\u53d1\u9001\u6076\u610f\u5e7f\u64ad\uff0c\u5728\u65e0\u9700\u4eba\u5de5\u5e72\u9884\u7684\u60c5\u51b5\u4e0b\uff0c\u5373\u53ef\u9020\u6210\u5b89\u5353\u7cfb\u7edf\u5bf9\u5916\u90e8\u5b58\u50a8SD\u5361\u8fdb\u884c\u683c\u5f0f\u5316\uff0c\u6e05\u9664\u6240\u6709\u7528\u6237\u6570\u636e\uff0c\u6062\u590d\u51fa\u5382\u8bbe\u7f6e\uff0c\u5e76\u91cd\u542f\u624b\u673a\u3002",
"discovererName": "MS509Team",
"formalWay": "\u8bbe\u7f6ecn.nubia.factory.service.FactoryResetReciver\u4e3a\u975e\u5bfc\u51fa\u72b6\u6001\uff0c\u6216\u8005\u901a\u8fc7\u6743\u9650\u4fdd\u62a4",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2015-04127",
"openTime": "2015-06-29",
"patchDescription": "\u53d1\u9001\u81f3psirt@zte.com.cn\uff0c\u6284\u9001\uff1aping.li@zte.com.cn\u90ae\u7bb1\u4e2d\u5904\u7f6e\u3002",
"patchName": "nubia z7\u624b\u673a\u5b58\u5728\u672c\u5730\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e",
"products": {
"product": [
"\u6df1\u5733\u5e02\u4e2d\u5174\u79fb\u52a8\u901a\u4fe1\u6709\u9650\u516c\u53f8 nubia z7 Android 4.4.2",
"\u6df1\u5733\u5e02\u4e2d\u5174\u79fb\u52a8\u901a\u4fe1\u6709\u9650\u516c\u53f8 nubia z7 UI V14.12.20"
]
},
"serverity": "\u4e2d",
"submitTime": "2015-05-13",
"title": "nubia z7\u624b\u673a\u672c\u5730\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…