CVE-2019-15378: Medium severity panasonic eluga ray 600 vulnerability

Published Nov 14, 2019

Updated

The Panasonic Eluga Ray 600 Android device with a build fingerprint of Panasonic/ELUGARay600/ELUGARay600:8.1.0/O11019/1532692680:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.

Affected Software

2 affected components

Panasonic Eluga Ray 600 Firmware

Panasonic Eluga Ray 600

Event History

Nov 14, 2019

CVE Published

via MITRE·04:25 PM

Data Sourced

via MITRE·04:25 PM

Description

Frequently Asked Questions

What is CVE-2019-15378?

CVE-2019-15378 is a vulnerability found in the Panasonic Eluga Ray 600 Android device that allows any app co-located on the device to execute arbitrary code.

How severe is CVE-2019-15378?

CVE-2019-15378 has a severity rating of 5.5 out of 10, which is considered medium.

What is the affected software?

The affected software is the firmware version of Panasonic Eluga Ray 600.

How can I fix CVE-2019-15378?

To fix CVE-2019-15378, it is recommended to update the firmware of the Panasonic Eluga Ray 600 to the latest version provided by Panasonic.

Where can I find more information about CVE-2019-15378?

For more information about CVE-2019-15378, you can refer to the advisory page on the Panasonic website and the Android Firmware Report by Kryptowire.