Back to Database
Status published
Unknown
CVE-2025-14817
Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB
Vulnerability Description
The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14817
Credits & Attribution
No credits recorded in the NVD database.
References
More from TECNO
View All →CVE-2025-9056
Unprotected service in the AudioLink component allows a local attacker...
Unknown
0
CVE-2025-7703
Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk...
Unknown
0
CVE-2025-6172
Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to...
Unknown
0
CVE-2025-4737
Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead...
Unknown
0
CVE-2025-3698
Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead...
Unknown
0
Affected Vendor
TECNO
View all reports →Affected Software
Tecno Pova6 Pro 5G
Vulnerable Versions:
HiOS V14.0.0
Timeline
Official Publish:
December 17th, 2025
Last Modified:
December 17th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available