CVE:CVE-2018-14991
CNNVD:CNNVD-201904-1177
Coolpad Defiant（build fingerprint为Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys）、ZTE ZMAX Pro（fingerprint为ZTE/P895T20/urd:6.0.1/MMB29M/20170418.114928:user/release-keys）和T-Mobile Revvl Plus（build fingerprint为Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildf_nj_02-206:user/release-keys）中的com.suntek.mway.rcs.app.service包存在安全漏洞。攻击者可利用该漏洞读取、编辑、插入及修改用户短信。
solution:Upgrade coolpad defiant_firmware to a higher version than -; Upgrade t-mobile revvl_plus_firmware to a higher version than -; Upgrade t-mobile zte_zmax_pro_firmware to a higher version than -