CVE-2020-12484

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a carefully constructed wifi with the same name, which can lead to man-in-the-middle attacks.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Dec 17, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-124855.5The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the bouCVE-2020-124877.0Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execCVE-2020-124885.5The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands withoCVE-2020-12497.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationCVE-2020-124914.8Improper control of framework service permissions with possibility of some sensitive device information leakage.CVE-2020-124921.0Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information.CVE-2020-1249310.0An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without acceCVE-2020-124945.3Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time featuresCVE-2020-124958.8Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege managCVE-2020-124966.5Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware versCVE-2020-124977.8PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. ManipulCVE-2020-124987.8mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code exe
CVE-2020-12484: Medium severity, CVSS 6.4 | Vulnix