CVE-2020-11716 - OpenCVE

Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Panasonic	P110 Firmware Eluga X1 Pro Firmware Eluga Ray 600 P110 Eluga X1 Eluga Ray 600 Firmware Eluga Z1 Pro Firmware Eluga Z1 Pro Eluga Ray 530 Firmware Eluga Ray 530 Eluga X1 Pro Eluga X1 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:panasonic:eluga_ray_530_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:panasonic:eluga_ray_530:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:panasonic:eluga_ray_600_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:panasonic:eluga_ray_600:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:panasonic:p110_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:panasonic:p110:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:panasonic:eluga_z1_pro_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:panasonic:eluga_z1_pro:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:panasonic:eluga_x1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:panasonic:eluga_x1:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:panasonic:eluga_x1_pro_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:panasonic:eluga_x1_pro:-:*:*:*:*:*:*:*

References

Link	Resource
https://mobile.panasonic.com/in/advisory	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2020-05-20T13:09:01

Updated: 2020-05-22T20:02:58

Reserved: 2020-04-12T00:00:00

Link: CVE-2020-11716

JSON object: View

NVD Information

Status : Analyzed

Published: 2020-05-20T14:15:11.253

Modified: 2023-03-03T02:39:54.107

Link: CVE-2020-11716

JSON object: View

Redhat Information

No data.

CWE

CWE-276

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:panasonic:eluga_ray_530_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F7992BB2-2CD4-4477-86FD-E15AC22B27CC", "versionEndIncluding": "2020-04-10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:panasonic:eluga_ray_530:-:*:*:*:*:*:*:*", "matchCriteriaId": "ED85D612-56C3-4381-A68F-9C2D4B225B53", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:panasonic:eluga_ray_600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D58FD5DF-2E55-48F8-B5F2-8EF63E4819A1", "versionEndIncluding": "2020-04-10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:panasonic:eluga_ray_600:-:*:*:*:*:*:*:*", "matchCriteriaId": "563F3742-D15E-4FD4-A163-6961EF8C18B7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:panasonic:p110_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5AB29CFD-470E-4216-8C58-D380EA3B3570", "versionEndIncluding": "2020-04-10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:panasonic:p110:-:*:*:*:*:*:*:*", "matchCriteriaId": "33D30D57-4759-48A9-94D3-922684FB9C2E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:panasonic:eluga_z1_pro_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F34B2998-9D52-4127-8052-EA345F3B6E8F", "versionEndIncluding": "2020-04-10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:panasonic:eluga_z1_pro:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C85712C-5834-4F9E-9681-004FF1CD85A2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:panasonic:eluga_x1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6251C36B-5C81-4D60-BF44-5E59B25ECEF0", "versionEndIncluding": "2020-04-10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:panasonic:eluga_x1:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1015578-56B4-4DC5-8001-ABA4115FB75F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:panasonic:eluga_x1_pro_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3DB7C894-03BB-4030-BAAE-A4E8684004CC", "versionEndIncluding": "2020-04-10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:panasonic:eluga_x1_pro:-:*:*:*:*:*:*:*", "matchCriteriaId": "67996F75-8803-47A5-9956-B2852B46EB30", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at \"End-of-software-support.\""}, {"lang": "es", "value": "Los dispositivos Panasonic P110, Eluga Z1 Pro, Eluga X1 y Eluga X1 Pro hasta el 10-04-2020 tienen permisos inseguros. NOTA: el proveedor declara que todos los productos afectados se encuentran en \"Fin de soporte de software\"."}], "id": "CVE-2020-11716", "lastModified": "2023-03-03T02:39:54.107", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-05-20T14:15:11.253", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://mobile.panasonic.com/in/advisory"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-276"}], "source": "nvd@nist.gov", "type": "Primary"}]}