Vulnerability CVE-2019-5914
Published: 2019-02-13   Modified: 2019-02-14

Description:
V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same network range via a specially crafted access point.

Type:

CWE-476

 (NULL Pointer Dereference)

CVSS2 => (AV:A/AC:M/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.7/10
6.9/10
5.5/10
Exploit range
Attack complexity
Authentication
Adjacent network
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Nttdocomo -> V20 pro l-01j firmware 

 References:
http://jvn.jp/en/jp/JVN40439414/index.html
https://www.nttdocomo.co.jp/support/utilization/product_update/list/l01j/index.html
Copyright 2024, cxsecurity.com

 

Back to Top