Security Advisory
CVE-2018-10988
7.8
HIGH
Vulnerability Description
An issue was discovered on Diqee Diqee360 devices. A firmware update process, integrated into the firmware, starts at boot and tries to find the update folder on the microSD card. It executes code, without a digital signature, as root from the /mnt/sdcard/$PRO_NAME/upgrade.sh or /sdcard/upgrage_360/upgrade.sh pathname.
Published Date
July 5, 2018
Official Source
NIST NVD Advisory