CVE-2020-12798

Name of the Vulnerable Software and Affected Versions Cellebrite UFED versions 5.0 through 7.5.0.845

Description The issue allows local operating system policies to be circumvented, enabling access to a command prompt. This can be achieved via the Windows file dialog, which is accessible through the Certificate-Based Authentication option on the Wireless Network Connection screen.

Recommendations For versions 5.0 through 7.5.0.845, consider restricting access to the Certificate-Based Authentication option of the Wireless Network Connection screen to minimize the risk of exploitation. As a temporary workaround, limit the use of the Windows file dialog to prevent obtaining a command prompt. At the moment, there is no information about a newer version that contains a fix for this vulnerability.