Lucene search

MitreCVE-2020-28715

HistoryAug 21, 2023 - 12:15 p.m.

CVE-2020-28715

2023-08-2112:15:07

mitre

web.nvd.nist.gov

cve-2020-28715

kdmserver

leeco letv x43

arbitrary code execution

privilege escalation

dos

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

65.7%

JSON

An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS).

Affected configurations

Nvd

Node

leecoletv_x43Match-

AND

leecoletv_x43_firmwareMatchv2401rcn02c080080b04121s

VendorProductVersionCPE
leecoletv_x43-cpe:2.3:h:leeco:letv_x43:-:*:*:*:*:*:*:*
leecoletv_x43_firmwarev2401rcn02c080080b04121scpe:2.3:o:leeco:letv_x43_firmware:v2401rcn02c080080b04121s:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
leeco	letv_x43	-	cpe:2.3:h:leeco:letv_x43:-:::::::*
leeco	letv_x43_firmware	v2401rcn02c080080b04121s	cpe:2.3:o:leeco:letv_x43_firmware:v2401rcn02c080080b04121s:::::::*

References

leeco.com

www.cnvd.org.cn/flaw/show/2602948

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

65.7%

JSON

Related for CVE-2020-28715