CVE-2020-0019

2020-12-1422:07:25

google_android

www.cve.org

broadcom nexus firmware

insecure default password

local information disclosure

android soc

cve-2020-0019

AI Score

5.3

Confidence

High

EPSS

Percentile

5.1%

JSON

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android SoC"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2020-12-01