Approved changes feed: RSS · Atom

cpe:2.3:o:androvideo:vd_1_firmware:230:*:*:*:*:*:*:*

part: o version: 230 update: *

VendorAndrovideo (5718b93d-4e95-5de3-a12e-86245bc2079f)
ProductVd 1 Firmware (362f5aae-9df8-559a-b914-3685d52dfc6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13405 vulnerable 2026-06-08 05:12:42.216957 Advan VD-1 allows a remote user to enable Android Debug Bridge without any authentication
A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enable ADB without any authentication then take the compromised device as a relay or to install mining software.
Published: 2019-08-29T00:19:23.331Z
Updated: 2024-09-16T22:24:40.037Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.