SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2020-15578

An issue was discovered on Samsung mobile devices with O(8.x) software.

MEDIUM 5.5EPSS 0.12%

Does this matter?

Lower severity and a low EPSS score (0.12%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered on Samsung mobile devices with O(8.x) software. FactoryCamera does not properly restrict runtime permissions. The Samsung ID is SVE-2020-17270 (July 2020).

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0.12% probability · 2th percentile
CISA KEV
Not listed
Weakness
CWE-276
Affected
google/android
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.