CVE-2024-20080
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08720039; Issue ID: MSV-1424.
En el servicio gnss existe una posible escalada de privilegios debido a una validación inadecuada del certificado. Esto podría conducir a una escalada remota de privilegios sin necesidad de permisos de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. ID de parche: ALPS08720039; ID del problema: MSV-1424.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-11-02 CVE Reserved
- 2024-07-01 CVE Published
- 2024-07-01 EPSS Updated
- 2024-08-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-295: Improper Certificate Validation
CAPEC
References (1)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mediatek Search vendor "Mediatek" | Mt2735 Search vendor "Mediatek" for product "Mt2735" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt2737 Search vendor "Mediatek" for product "Mt2737" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6761 Search vendor "Mediatek" for product "Mt6761" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6765 Search vendor "Mediatek" for product "Mt6765" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6768 Search vendor "Mediatek" for product "Mt6768" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6781 Search vendor "Mediatek" for product "Mt6781" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6785 Search vendor "Mediatek" for product "Mt6785" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6789 Search vendor "Mediatek" for product "Mt6789" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6833 Search vendor "Mediatek" for product "Mt6833" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6853 Search vendor "Mediatek" for product "Mt6853" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6853t Search vendor "Mediatek" for product "Mt6853t" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6855 Search vendor "Mediatek" for product "Mt6855" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6873 Search vendor "Mediatek" for product "Mt6873" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6875 Search vendor "Mediatek" for product "Mt6875" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6877 Search vendor "Mediatek" for product "Mt6877" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6879 Search vendor "Mediatek" for product "Mt6879" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6880 Search vendor "Mediatek" for product "Mt6880" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6883 Search vendor "Mediatek" for product "Mt6883" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6885 Search vendor "Mediatek" for product "Mt6885" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6886 Search vendor "Mediatek" for product "Mt6886" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6889 Search vendor "Mediatek" for product "Mt6889" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6890 Search vendor "Mediatek" for product "Mt6890" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6891 Search vendor "Mediatek" for product "Mt6891" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6893 Search vendor "Mediatek" for product "Mt6893" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6895 Search vendor "Mediatek" for product "Mt6895" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6980 Search vendor "Mediatek" for product "Mt6980" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6983 Search vendor "Mediatek" for product "Mt6983" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6985 Search vendor "Mediatek" for product "Mt6985" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6989 Search vendor "Mediatek" for product "Mt6989" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt6990 Search vendor "Mediatek" for product "Mt6990" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt8666 Search vendor "Mediatek" for product "Mt8666" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt8667 Search vendor "Mediatek" for product "Mt8667" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt8673 Search vendor "Mediatek" for product "Mt8673" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt8676 Search vendor "Mediatek" for product "Mt8676" | * | - |
Affected
| ||||||
| Mediatek Search vendor "Mediatek" | Mt8678 Search vendor "Mediatek" for product "Mt8678" | * | - |
Affected
| ||||||
| Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | * | - |
Affected
| ||||||