{"schemaVersion":3,"id":"CVE-2018-14990","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE/P895T20/urd:6.0.1/MMB29M/20170418.114928:user/release-keys, and the T-Mobile Revvl Plus with a build fingerprint of Coolpad/alchemy/alchemy:7.1.1/143.14.171129.3701A-TMO/buildf_nj_02-206:user/release-keys all contain a vulnerable, pre-installed Rich Communication Services (RCS) app. These devices contain an that app has a package name of com.suntek.mway.rcs.app.service (versionCode=1, versionName=RCS_sdk_M_native_20161008_01; versionCode=1, versionName=RCS_sdk_M_native_20170406_01) with a broadcast receiver app component named com.suntek.mway.rcs.app.test.TestReceiver and a refactored version of the app with a package name of com.rcs.gsma.na.sdk (versionCode=1, versionName=RCS_SDK_20170804_01) with a broadcast receiver app component named com.rcs.gsma.na.test.TestReceiver allow any app co-located on the device to programmatically send text messages where the number and body of the text message is controlled by the attacker due to an exported broadcast receiver app component. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. A separate vulnerability in the app allows a zero-permission app to programmatically delete text messages, so the sent text messages can be removed to not alert the user.","dates":{"published":"2019-04-25T19:33:20.000Z","modified":"2024-08-05T09:46:25.369Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01829,"percentile":0.78565,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.01829},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01806,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01829,"percentile":0.78565}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01806,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01829,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01829,"percentile":0.78565}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_E590A5D78AF1DE7E","name":"Exploit Reference (kryptowire.com)","source":"reference","url":"https://www.kryptowire.com/portal/android-firmware-defcon-2018/","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"coolpad","product":"defiant_firmware","name":"defiant firmware","label":"defiant_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/coolpad/defiant"},{"vendor":"t-mobile","product":"revvl_plus_firmware","name":"revvl plus firmware","label":"revvl_plus_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/t-mobile/revvl_plus"},{"vendor":"t-mobile","product":"zte_zmax_pro_firmware","name":"zte zmax pro firmware","label":"zte_zmax_pro_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/t-mobile/zte_zmax_pro"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf","label":"www.kryptowire.com/portal/…","hostname":"www.kryptowire.com","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"https://www.kryptowire.com/portal/android-firmware-defcon-2018/","label":"www.kryptowire.com/portal/android-firmware-defcon-2018/","hostname":"www.kryptowire.com","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://www.kryptowire.com","label":"www.kryptowire.com","hostname":"www.kryptowire.com","tags":["X Refsource MISC","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-04-25T19:33:20.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T09:46:25.369Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T13:45:57.128Z","stale":false,"partial":false}}