CVE-2020-25064

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Certain automated testing is mishandled. The LG ID is LVE-SMP-200019 (August 2020).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Aug 31, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-250657.5An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may oCVE-2020-250669.8A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/CVE-2020-250678.8NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.CVE-2020-250687.5Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attackerCVE-2020-250699.8USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view.CVE-2020-25079.8The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remotCVE-2020-250708.8USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature.CVE-2020-250715.4Nifty Project Management Web Application 2020-08-26 allows XSS, via Add Task, that is rendered upon a Project Home visit. Note: It has been CVE-2020-250735.3FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, becCVE-2020-250749.8The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who caCVE-2020-250787.5An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser enCVE-2020-250798.8An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authentica
CVE-2020-25064: High severity, CVSS 7.5 | Vulnix