CVE-2020-13841

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets). An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 (June 2020).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jun 5, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-138427.8An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT command was made availa CVE-2020-138435.5An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because c CVE-2020-138445.5Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosur CVE-2020-138457.5Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy CVE-2020-138467.5Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.CVE-2020-138477.5Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found i CVE-2020-138487.5Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message d CVE-2020-138497.5The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remot CVE-2020-13857.8An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows Credent CVE-2020-138507.5Artica Pandora FMS 7.44 has inadequate access controls on a web folder.CVE-2020-138518.8Artica Pandora FMS 7.44 allows remote command execution via the events feature.CVE-2020-138527.2Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.