CVE-2019-16241 - On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory

Back Back to CVE browser

MEDIUM

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory

Published Nov 26, 2019

6.8

MEDIUM

CVSS 3.1

EPSS 0.48%

Description

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. This file would typically be created via Android Debug Bridge (adb) over USB.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-668

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7048
Advisory
https://www.nccgroup.trust/uk/our-research/?research=Technical+advisories
x_refsource_MISCThird Party Advisory
https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-alcatel-flip-2/#C
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7048		Advisory
https://www.nccgroup.trust/uk/our-research/?research=Technical+advisories		x_refsource_MISCThird Party Advisory
https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-alcatel-flip-2/#C		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 26, 2019

Updated Aug 5, 2024

Reserved Sep 11, 2019

Link CVE-2019-16241

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-16241

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 26, 2019

Updated Aug 5, 2024

Link EUVD-2019-7048

GitHub

No data