CVE-2020-12484

Published: Dec 17, 2024Modified: Jun 17, 2026Deferred

6.4

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Exploitability: 1.2 / Impact: 5.2

Source: security@vivo.com (Secondary)

Description

When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a carefully constructed wifi with the same name, which can lead to man-in-the-middle attacks.

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

https://www.vivo.com/en/support/security-advisory-detail?id=3

Source: security@vivo.com

Timeline

No history available yet.