CVE-2019-13405: Advan VD-1 allows a remote user to enable Android Debug Bridge without any authentication

Security readout for executives and security teams

Advan VD-1 firmware version 230 can let a remote unauthenticated user turn on Android Debug Bridge. That could allow the device to be abused as infrastructure, including as a relay or for cryptocurrency mining. No CVSS score or confirmed active exploitation is provided in the source bundle. Exposure is limited to organizations running AndroVideo Advan VD-1 devices on firmware version 230, especially if the device management interface is reachable from untrusted networks or the internet. Treat this as a targeted asset exposure issue. Prioritize finding affected devices, removing untrusted network access, and checking vendor guidance. Urgency is higher where these devices are internet-facing or connected to sensitive networks. Mitigation focus: Inventory Advan VD-1 devices and confirm firmware versions.; Restrict device management interfaces to trusted administrative networks.; Keep ADB disabled unless explicitly required for maintenance..

Prepared

Jun 6, 2026, 13:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.