PT-2020-11388 · Google+1 · Android+1

Published 2020-12-14 · Updated 2021-07-21 · CVE-2020-0019

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android SoC versions (affected versions not specified)

Description The issue concerns an insecure default password in the Broadcom Nexus firmware. This could lead to local information disclosure in the kernel without requiring additional execution privileges. Notably, user interaction is not necessary for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2020-0019

Affected Products

Android

Broadcom Nexus

References · 2

• https://source.android.com/security/bulletin/2020-12-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0019 · Security Note