CVE-2019-15429: High severity panasonic eluga i9 vulnerability

Published Nov 14, 2019

Updated

The Panasonic ELUGAI9 Android device with a build fingerprint of Panasonic/ELUGAI9/ELUGAI9:7.0/NRD90M/1501740649:user/release-keys contains a pre-installed app with a package name of com.ovvi.modem app (versionCode=1, versionName=1) that allows unauthorized attacker-controlled at command via a confused deputy attack. This capability can be accessed by any app co-located on the device.

Affected Software

2 affected components

Panasonic Eluga I9 Firmware

Panasonic Eluga I9

Event History

Nov 14, 2019

CVE Published

via MITRE·04:26 PM

Data Sourced

via MITRE·04:26 PM

Description

Frequently Asked Questions

What is CVE-2019-15429?

CVE-2019-15429 is a vulnerability in the Panasonic ELUGA_I9 Android device that allows unauthorized attacker-controlled AT commands.

What is the severity of CVE-2019-15429?

The severity of CVE-2019-15429 is high, with a severity value of 7.8.

How does CVE-2019-15429 affect the Panasonic Eluga I9 Firmware?

The Panasonic Eluga I9 Firmware is affected by CVE-2019-15429, allowing unauthorized attacker-controlled AT commands.

How can I fix CVE-2019-15429?

To fix CVE-2019-15429, update your Panasonic ELUGA_I9 Android device to the latest firmware version.

Where can I find more information about CVE-2019-15429?

You can find more information about CVE-2019-15429 in the following references: [1](https://mobile.panasonic.com/in/advisory) and [2](https://www.kryptowire.com/android-firmware-2019/).