CVE-2019-20780

EPSS 0.15%
Veröffentlicht 17.04.2020 14:15:16
Zuletzt bearbeitet 21.11.2024 04:39:20
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Certain security settings, related to whether packages are verified and accepted only from known sources, are mishandled. The LG ID is LVE-SMP-190002 (April 2019).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version7.0

Google ≫ Android Version7.1

Google ≫ Android Version7.2

Google ≫ Android Version8.0

Google ≫ Android Version8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.15%	0.318

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://lgsecurity.lge.com/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-20780

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-20780

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-20780

EUVD