CVE-2020-13626

MEDIUM

4.6

Descricao

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked.

Detalhes CVE

Pontuacao CVSS v3.14.6

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Vetor de ataquePHYSICAL

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado10/9/2020

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

oneplus:app_locker

Fraquezas (CWE)

CWE-862

Referencias

https://medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5(cve@mitre.org)

https://support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-locker(cve@mitre.org)

https://medium.com/%40bugsbunnyy1107/the-tell-tale-of-cve-in-oneplus-phones-91e97342a8b5(af854a3a-2127-422b-91ae-364da2661108)

https://support.oneplus.com/app/answers/detail/a_id/301/~/how-to-use-app-locker(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.