4.6
CVE-2020-13626
- EPSS 0.31%
- Veröffentlicht 09.10.2020 06:15:09
- Zuletzt bearbeitet 21.11.2024 05:01:37
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginOnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oneplus ≫ App Locker Version <= 2020-10-06
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.31% | 0.226 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 0.9 | 3.6 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5
https://support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-locker