PT-2020-15917 · Lg+1 · Dmservice+1

Published 2020-08-31 · Updated 2020-09-01 · CVE-2020-25057

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 10 software

Description An issue was discovered where the MDMService does not properly restrict APK installations.

Recommendations For LG mobile devices with Android OS 10 software, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2020-25057

Affected Products

Android Os 10

Dmservice

References · 3

• https://lgsecurity.lge.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25057 · Security Note