PT-2020-12909 · Google · Android

Published 2020-04-17 · Updated 2020-04-24 · CVE-2020-11874

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 8.0 through 10

Description An issue allows attackers to bypass Factory Reset Protection (FRP) on the affected devices.

Recommendations For Android OS versions 8.0 through 10, consider implementing additional security measures to protect against unauthorized access until a patch is available. As a temporary workaround, restrict access to the device's reset functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-11874

Affected Products

Android

References · 3

• https://lgsecurity.lge.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11874 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11874 · Security Note