CVE-2021-41850: Bluproducts g90 Firmware

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values can be obtained via getprop by all third-party applications co-located on the device, even those with no permissions granted, exposing the IMEI values to processes without enforcing any access control.

Affected products

• Bluproducts g90 Firmware: affected versions not specified
• Bluproducts g9 Firmware: affected versions not specified
• Luna Simo Firmware: affected versions not specified
• Wikomobile Tommy 3 Firmware: affected versions not specified
• Wikomobile Tommy 3 Plus Firmware: affected versions not specified

Published 2022-03-11. Last modified 2026-06-17.