Lucene search

[email protected]CVE-2020-11836

HistoryFeb 06, 2021 - 12:15 a.m.

CVE-2020-11836

2021-02-0600:15:12

[email protected]

web.nvd.nist.gov

oppo

android

mtk

chipset

android 8.1

android 9

android 10

android 11

information leak

vulnerability

nvd

cve-2020-11836

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no.

Affected configurations

NVD

Node

oppoa12Match-

oppoa15Match-

oppoa15sMatch-

oppoa31Match-

oppoa33Match-

oppoa5Match-

oppoa52Match-

oppoa53Match-

oppoa9Match-

oppof15Match-

oppof17Match-

oppof17_proMatch-

opporeno_2Match-

opporeno_2fMatch-

opporeno_2zMatch-

opporeno_3_proMatch-

opporeno_4_proMatch-

opporeno_5_pro_5gMatch-

AND

googleandroidMatch8.1

googleandroidMatch9.0

googleandroidMatch10.0

googleandroidMatch11.0

CPENameOperatorVersion
google:androidgoogle androideq8.1
google:androidgoogle androideq9.0
google:androidgoogle androideq10.0
google:androidgoogle androideq11.0

CPE	Name	Operator	Version
google:android	google android	eq	8.1
google:android	google android	eq	9.0
google:android	google android	eq	10.0
google:android	google android	eq	11.0

CNA Affected

[
  {
    "product": "OPPO Android Phone with MTK chipset",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OPPO Mobile phones with mtk chipset and Android 8.1/9/10/11 versions"
      }
    ]
  }
]

References

security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1357213888449617920

Social References

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2020-11836

cvelist1 prion1 nvd1