CVE-2021-41850: Infoleak
An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values can be obtained via getprop by all third-party applications co-located on the device, even those with no permissions granted, exposing the IMEI values to processes without enforcing any access control.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2021-41850.
What is the severity of CVE-2021-41850?
The severity of CVE-2021-41850 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2021-41850?
The Luna Simo PPR1.180610.011/202001031830 firmware version is affected by CVE-2021-41850.
How can the system property values be obtained?
The system property values can be obtained via getprop by all third-party applications co-located on the device.
Are the Bluproducts G90 and G9 affected by CVE-2021-41850?
No, the Bluproducts G90 and G9 are not affected by CVE-2021-41850.