CVE-2020-13626

MEDIUM

4.6

Beschreibung

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked.

CVE Details

CVSS v3.1 Bewertung4.6

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AngriffsvektorPHYSICAL

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht10/9/2020

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

oneplus:app_locker

Schwachen (CWE)

CWE-862

Referenzen

https://medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5(cve@mitre.org)

https://support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-locker(cve@mitre.org)

https://medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5(af854a3a-2127-422b-91ae-364da2661108)

https://support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-locker(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.