[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fm7YC_ZALVNxlSIqwn7QX84HUziMIl3Iv8LbK7vxGFp0":3,"g5a-ex:t-mobile\u002Fzte_zmax_pro_firmware@*":53,"g5a-family:t-mobile\u002Fzte_zmax_pro_firmware":55},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":30,"seoMetadata":31,"meta":50},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"t-mobile","zte_zmax_pro_firmware",0,2,"2019-04-25",[],"Zte Zmax Pro Firmware by T-mobile is a technology product and 2 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,24],{"cveId":17,"description":18,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2018-14991","The Coolpad Defiant device with a build fingerprint of Coolpad\u002Fcp3632a\u002Fcp3632a:7.1.1\u002FNMF26F\u002F099480857:user\u002Frelease-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE\u002FP895T20\u002Furd:6.0.1\u002FMMB29M\u002F20170418.114928:user\u002Frelease-keys, and the T-Mobile Revvl Plus with a build fingerprint of Coolpad\u002Falchemy\u002Falchemy:7.1.1\u002F143.14.171129.3701A-TMO\u002Fbuildf_nj_02-206:user\u002Frelease-keys all contain a vulnerable, pre-installed Rich Communication Services (RCS) app. These devices contain an that app has a package name of com.suntek.mway.rcs.app.service (versionCode=1, versionName=RCS_sdk_M_native_20161008_01; versionCode=1, versionName=RCS_sdk_M_native_20170406_01) with an exported content provider named com.suntek.mway.rcs.app.service.provider.message.MessageProvider and a refactored version of the app with a package name of com.rcs.gsma.na.sdk (versionCode=1, versionName=RCS_SDK_20170804_01) with a content provider named com.rcs.gsma.na.provider.message.MessageProvider allow any app co-located on the device to read, write, insert, and modify the user's text messages. This is enabled by an exported content provider app component that serves as a wrapper to the official content provider that contains the user's text messages. This app cannot be disabled by the user and the attack can be performed by a zero-permission app.",9.8,"v3.0","Critical",false,0.01919,{"cveId":25,"description":26,"publishedDate":11,"cvssScore":27,"cvssVersion":20,"severity":28,"isKev":22,"epssScore":29},"CVE-2018-14990","The Coolpad Defiant device with a build fingerprint of Coolpad\u002Fcp3632a\u002Fcp3632a:7.1.1\u002FNMF26F\u002F099480857:user\u002Frelease-keys, the ZTE ZMAX Pro with a build fingerprint of ZTE\u002FP895T20\u002Furd:6.0.1\u002FMMB29M\u002F20170418.114928:user\u002Frelease-keys, and the T-Mobile Revvl Plus with a build fingerprint of Coolpad\u002Falchemy\u002Falchemy:7.1.1\u002F143.14.171129.3701A-TMO\u002Fbuildf_nj_02-206:user\u002Frelease-keys all contain a vulnerable, pre-installed Rich Communication Services (RCS) app. These devices contain an that app has a package name of com.suntek.mway.rcs.app.service (versionCode=1, versionName=RCS_sdk_M_native_20161008_01; versionCode=1, versionName=RCS_sdk_M_native_20170406_01) with a broadcast receiver app component named com.suntek.mway.rcs.app.test.TestReceiver and a refactored version of the app with a package name of com.rcs.gsma.na.sdk (versionCode=1, versionName=RCS_SDK_20170804_01) with a broadcast receiver app component named com.rcs.gsma.na.test.TestReceiver allow any app co-located on the device to programmatically send text messages where the number and body of the text message is controlled by the attacker due to an exported broadcast receiver app component. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. A separate vulnerability in the app allows a zero-permission app to programmatically delete text messages, so the sent text messages can be removed to not alert the user.",7.5,"High",0.01829,[],{"title":32,"metaDescription":33,"keywords":34,"structuredData":35},"Zte Zmax Pro Firmware by T-mobile - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Zte Zmax Pro Firmware by T-mobile with 2 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Zte Zmax Pro Firmware vulnerabilities, Zte Zmax Pro Firmware security, Zte Zmax Pro Firmware CVE, T-mobile Zte Zmax Pro Firmware, Zte Zmax Pro Firmware threat intelligence, T-mobile security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":36,"@type":37,"name":38,"description":33,"url":39,"manufacturer":40,"applicationCategory":44,"softwareVersion":45,"mainEntity":46},"https:\u002F\u002Fschema.org","SoftwareApplication","Zte Zmax Pro Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ft-mobile\u002Fzte_zmax_pro_firmware",{"@type":41,"name":42,"url":43},"Organization","T-mobile","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ft-mobile","Security Software","Multiple versions",{"@type":47,"name":48,"description":49,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Zte Zmax Pro Firmware Security Vulnerabilities","Security vulnerabilities affecting Zte Zmax Pro Firmware by T-mobile",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":51,"apiVersion":52},"2026-10-19T00:46:01.230Z","3.0",{"rows":54,"total":9,"capped":22,"failed":9},[],[]]