CVE-2020-2505

LowCVSS 2.3/10Last modified Jun 17, 2026

Description

If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

Metrics

CVSS 3.1 2.3/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-209CWE-755

Affected software

No affected versions have been published.

Timeline

Published
Dec 24, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-250507.5An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC service allows attackers to obtain sensitive infCVE-2020-250517.5An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via CVE-2020-250529.8An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H-Arx allows attackers to execute arbitrary cCVE-2020-250539.8An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. RKP allows arbitrary code execution. The SamsCVE-2020-250549.1An issue was discovered on Samsung mobile devices with software through 2020-04-02 (Exynos modem chipsets). There is a heap-based buffer oveCVE-2020-250559.8An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The persona service allows attackers (who contrCVE-2020-250567.5An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software. Because HAL improperly checks versions, bootloading byCVE-2020-250579.8An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not properly restrict APK installations. The LG IDCVE-2020-250589.8An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management service does not properly CVE-2020-250597.5An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occur because of incorreCVE-2020-25069.8The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allowCVE-2020-250607.8An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain privileges because of L
CVE-2020-2505: Low severity, CVSS 2.3 | Vulnix