CVE-2019-15335 describes a vulnerability in the Lava Z92 Android device, specifically within a pre-installed "com.android.lava.powersave" application. This flaw allows any co-located application to disable or enable Wi-Fi without requiring the necessary permissions, due to an exported interface. The vulnerability has a low CVSS score of 3.3, indicating a low severity. An attacker would need local access to the device (AV:L) and the impact is limited to modifying Wi-Fi state (I:L), with no confidentiality or availability impact (C:N, A:N). Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, suggesting low public awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:lavamobiles:z92_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.