PT-2018-13048 · Lg · Lg

Publicado 2018-08-17 · Atualizado 2019-10-03 · CVE-2018-15482

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG devices versions 6.0 through 8.1

Description The issue concerns incorrect access control for MLT application intents on certain LG devices.

Recommendations For versions 6.0 through 8.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-15482

Produtos afetados

Lg

Referências · 4

• https://kryptowire.com/portal/android-firmware-defcon-2018 · Nota
• https://osv.dev/vulnerability/CVE-2018-15482 · Aviso do Fabricante
• https://lgsecurity.lge.com/security_updates.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-15482 · Nota de Segurança