New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2024-20005

NVDCIRCLENISA

EUVD-2024-17720 · Published Mar 4, 2024

In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID: ALPS08355599.

Technologies

Mediatek Mt6853TMediatek Mt6789Mediatek Mt6781Mediatek Mt6779Mediatek Mt6875Mediatek Mt8667Mediatek Mt6765Mediatek Mt6768Mediatek Mt8673Mediatek Mt8675Mediatek Mt6853Mediatek Mt6883Mediatek Mt8666AGoogle AndroidMediatek Mt6889Mediatek Mt6895Mediatek Mt6985Mediatek Mt6885Mediatek Mt6873Mediatek Mt6769Mediatek Mt6761Mediatek Mt6771Mediatek Mt6893Mediatek Mt6785Mediatek Mt6833Mediatek Mt8676Mediatek Mt6886Mediatek Mt6983Mediatek Mt6762Mediatek Mt6763Mediatek Mt8666Mediatek Mt6891Mediatek Mt6877Mediatek Mt6835Mediatek Mt6879Mediatek Mt6855Mediatek Mt8666BMediatek Mt8678

Weaknesses

CWE-276

CVSS scores

  • v3.18.2CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Execution Privilege Escalation Stealth Discovery

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot