First published: Thu Nov 14 2019(Updated: )
The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyaki_softbank/keyaki_softbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a pre-installed app with a package name of jp.softbank.mb.tdrl app (versionCode=1413005, versionName=1.3.0) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sony Xperia Xzs Firmware | ||
Sony Xperia Xzs |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this device is CVE-2019-15744.
The severity of CVE-2019-15744 is low with a severity value of 3.3.
The affected software of CVE-2019-15744 is Sony Xperia Xzs Firmware.
To fix CVE-2019-15744, it is recommended to update the Sony Xperia XZs Android device firmware to the latest version.
You can find more information about CVE-2019-15744 at the following reference: [https://www.kryptowire.com/android-firmware-2019/](https://www.kryptowire.com/android-firmware-2019/)