CVE-2020-13842

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT command was made available even though it is unused. The LG ID is LVE-SMP-200010 (June 2020).

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jun 5, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-138435.5An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because cCVE-2020-138445.5Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosurCVE-2020-138457.5Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy CVE-2020-138467.5Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.CVE-2020-138477.5Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found iCVE-2020-138487.5Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message dCVE-2020-138497.5The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remotCVE-2020-13857.8An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows CredentCVE-2020-138507.5Artica Pandora FMS 7.44 has inadequate access controls on a web folder.CVE-2020-138518.8Artica Pandora FMS 7.44 allows remote command execution via the events feature.CVE-2020-138527.2Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.CVE-2020-138535.4Artica Pandora FMS 7.44 has persistent XSS in the Messages feature.
CVE-2020-13842: High severity, CVSS 7.8 | Vulnix