PT-2020-15918 · Google · Android

Published 2020-08-31 · Updated 2020-09-01 · CVE-2020-25058

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 8.0 through 10

Description An issue was discovered where the network management service does not properly restrict configuration changes.

Recommendations For Android OS versions 8.0 through 10, consider restricting access to the network management service until a patch is available. As a temporary workaround, avoid making configuration changes through this service to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-25058

Affected Products

Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-25058 · Security Note
• https://lgsecurity.lge.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25058 · Vendor Advisory