Search/CVE-2015-9213
● CVE — High

CVE-2015-9213

VendorqualcommProductmdm9206 firmware, mdm9607 firmware, mdm9650 firmware, sd 210 firmware, sd 212 firmware, sd 410 firmware, sd 412 firmware, sd 415 firmware, sd 425 firmware, sd 430 firmware, sd 615 firmware, sd 616 firmware, sd 617 firmware, sd 625 firmware, sd 650 firmware, sd 205 firmware, sd 400 firmware, sd 450 firmware, msm8909w firmware, mdm9640 firmware, mdm9625 firmware, mdm9635m firmware, mdm9645 firmware, mdm9655 firmware, mdm9615 firmwareDiscoveredApr 18, 2018UpdatedNov 21, 2024

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, the DIAG-EFS command EFS2_DIAG_DELTREE, which is handled by the function fs_diag_deltree_handler(), is used to delete files and directories only inside the /public folder.

CVSS v3.1
7.5 HIGH
EPSS
0.66%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 28, 2026
▼ 0.04pp
0.70% → 0.66% over 10 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityHIGH
AvailabilityNONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Connections
26 relationships
Timeline
disclosure → media coverage
Apr 18, 2018
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024