Approved changes feed: RSS · Atom

cpe:2.3:a:ulefone:com.pri.factorytest:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUlefone (d8a29d44-7f4e-5412-8a2c-e7a96f6acc7d)
ProductCom.Pri.Factorytest (af437a34-8655-5b1d-a5a1-4fbb948a560d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-13915 under_investigation 2026-06-08 06:25:38.745215 Unrestricted Access to Exported Service in com.pri.factorytest
Android based smartphones from vendors such as Ulefone and Krüger&Matz contain "com.pri.factorytest" application preloaded onto devices during manufacturing process. The application "com.pri.factorytest" (version name: 1.0, version code: 1) exposes a ”com.pri.factorytest.emmc.FactoryResetService“ service allowing any application to perform a factory reset of the device.  Application update did not increment the APK version. Instead, it was bundled in OS builds released later than December 2024 (Ulefone) and April 2025 (Krüger&Matz).
Published: 2025-05-30T15:09:58.520Z
Updated: 2025-06-10T08:49:37.732Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.