PT-2020-11652

CVE-2020-0298

·

Published

2020-09-18

·

Updated

2022-07-12

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions prior to Android-11
Description The issue concerns a missing permission check in Bluetooth, allowing control over the Bluetooth enabled state. This could lead to local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations For Android versions prior to Android-11, update to Android-11 or a later version to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2020-0298
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com