CVE-2020-1837

Name of the Vulnerable Software and Affected Versions ChangXiang 8 Plus versions earlier than 9.1.0.136(C00E121R1P6T8)

Description The device does not properly handle certain messages from the base station, allowing an attacker to craft a fake base station and launch an attack. Successful exploitation could cause a denial of signal service condition.

Recommendations For versions earlier than 9.1.0.136(C00E121R1P6T8), update to version 9.1.0.136(C00E121R1P6T8) or later to resolve the issue. As a temporary workaround, consider restricting access to the device's base station communication to minimize the risk of exploitation.