Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Asus Subscribe
Filtered by product Zenfone Live \(l1\)
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-15393 1 Asus 2 Zenfone Live \(l1\), Zenfone Live \(l1\) Firmware 2019-11-27 2.1 LOW 3.3 LOW
The Asus ZenFone Live Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app (versionCode=1, versionName=1) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.