PT-2020-16471 · Google · Android

Published 2020-10-06 · Updated 2020-10-08 · CVE-2020-26598

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 8.0 through 9.0

Description An issue in the Network Management component could allow an unauthorized actor to kill a TCP connection.

Recommendations For Android OS versions 8.0 through 9.0, consider restricting access to the Network Management component until a patch is available. As a temporary workaround, avoid using the affected Network Management functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2020-26598

Affected Products

Android

References · 4

• https://osv.dev/vulnerability/CVE-2020-26598 · Vendor Advisory
• https://lgsecurity.lge.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26598 · Security Note
• https://t.me/cibsecurity/15094 · Telegram Post