PT-2020-13723 · Google+2 · Android+2

Published 2020-06-04 · Updated 2020-06-11 · CVE-2020-13842

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets)

Description An issue was discovered where a dangerous AT command was made available on the devices, even though it is unused.

Recommendations For Android OS versions 7.2, 8.0, 8.1, 9, and 10, consider restricting access to the AT command as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2020-13842

Affected Products

Android

Lg Mobile Devices

Mtk

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-13842 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13842 · Vendor Advisory
• https://lgsecurity.lge.com · Vendor Advisory