Vulnerability Details CVE-2015-3854
packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://seclists.org/fulldisclosure/2016/May/71
- http://seclists.org/fulldisclosure/2016/May/72
- https://android.googlesource.com/platform/frameworks/base/+/05e0705177d2078fa9f940ce6df723312cfab976
- http://seclists.org/fulldisclosure/2016/May/71
- http://seclists.org/fulldisclosure/2016/May/72
- https://android.googlesource.com/platform/frameworks/base/+/05e0705177d2078fa9f940ce6df723312cfab976
Products affected by CVE-2015-3854
-
cpe:2.3:o:google:android:5.0
-
cpe:2.3:o:google:android:5.0.1
-
cpe:2.3:o:google:android:5.0.2
-
cpe:2.3:o:google:android:5.1
-
cpe:2.3:o:google:android:5.1.0
-
cpe:2.3:o:google:android:5.1.1