CVE-2019-16272 Security feature bypass in n/a
Factory settings on DTEN devices allow firmware reflash and ADB enablement, enabling unauthorized code execution and privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-16272?
CVE-2019-16272 is a critical vulnerability in n/a, published on 6 Jan 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enablement.
Weakness: CWE-1188
Which versions are affected by CVE-2019-16272?
It affects 2 products.
Products include Dten D5 Firmware, Dten D7 Firmware.
How do I fix CVE-2019-16272?
No fix has been published for CVE-2019-16272 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-16272 being exploited?
There is no known exploitation of CVE-2019-16272 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-f5hg-c5v9-hv9c.