PT-2024-10776 · Vivo · Wifi

Zheng Yuwei · Published 2024-12-17 · Updated 2024-12-17 · CVE-2020-12484

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue arises when using a special mode to connect to enterprise WiFi. Certain options are not properly configured, allowing attackers to pretend to be the enterprise WiFi by creating a carefully constructed WiFi network with the same name. This can lead to man-in-the-middle attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-12484

Affected Products

Wifi

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-12484 · Security Note
• https://t.me/cvedetector/13064 · Telegram Post
• https://vivo.com/en/support/security-advisory-detail?id=3 · Note
• https://twitter.com/CVEnew/status/1868859968252002317 · Twitter Post
• https://t.me/cvenotify/104484 · Telegram Post