CVE-2020-11716 Misconfiguration in n/a
Insecure permissions on Panasonic Android devices allow attackers to escalate privileges or access data, with no fix available due to end-of-support status.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-11716?
CVE-2020-11716 is a critical vulnerability in n/a, published on 20 May 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."
Weakness: CWE-276
Which versions are affected by CVE-2020-11716?
It affects 6 products.
Products include Panasonic Eluga Ray 530 Firmware, Panasonic Eluga Ray 600 Firmware, Panasonic Eluga X1 Firmware, Panasonic Eluga X1 Pro Firmware, Panasonic Eluga Z1 Pro Firmware, Panasonic P110 Firmware.
How do I fix CVE-2020-11716?
No fix has been published for CVE-2020-11716 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-11716 being exploited?
There is no known exploitation of CVE-2020-11716 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-q2w5-c23g-48m2.