CVE-2020-11716

CRITICAL

9.8

Description

Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published5/20/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

panasonic:eluga_ray_530panasonic:eluga_ray_530_firmwarepanasonic:eluga_ray_600panasonic:eluga_ray_600_firmwarepanasonic:eluga_x1panasonic:eluga_x1_firmwarepanasonic:eluga_x1_propanasonic:eluga_x1_pro_firmwarepanasonic:eluga_z1_propanasonic:eluga_z1_pro_firmwarepanasonic:p110panasonic:p110_firmware

Weaknesses (CWE)

CWE-276

References

https://mobile.panasonic.com/in/advisory(cve@mitre.org)

https://mobile.panasonic.com/in/advisory(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.