PT-2021-13037 · Google · Android

Le Wu + 1 · Published 2021-02-02 · Updated 2021-02-24 · CVE-2021-0358

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11

Description: The issue is related to a possible command injection in netdiag due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Recommendations: For Android versions Android-10 through Android-11, apply the patch with ID ALPS05442022 to resolve the issue.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2021-0358

Affected Products

Android

References · 7

• https://osv.dev/vulnerability/CVE-2021-0358 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0358 · Security Note
• https://t.me/cibsecurity/22999 · Telegram Post
• https://t.me/cvenotify/10394 · Telegram Post
• https://t.me/cvenotify/9294 · Telegram Post
• https://corp.mediatek.com/product-security-acknowledgements · Note
• https://t.me/cvenotify/10342 · Telegram Post