PT-2021-9458 · Unknown · Jovi Smart Scene Module

Published 2021-11-10 · Updated 2021-11-15 · CVE-2020-12488

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions jovi Smart Scene module (affected versions not specified)

Description The issue allows an attacker to access sensitive information within the jovi Smart Scene module by entering carefully constructed commands without requesting permission.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-284

CWE-668

Related Identifiers

CVE-2020-12488

Affected Products

Jovi Smart Scene Module

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-12488 · Security Note
• https://vivo.com/en/support/security-advisory-detail?id=5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12488 · Vendor Advisory
• https://t.me/cibsecurity/32171 · Telegram Post