CVE-2020-0137
HIGHAndroid 10 - Missing Authorization in NetworkManagementService
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-0137. PoCs published by ShaikUsaf, nanopathi.
AI-analyzed exploit summary This repository contains a proof-of-concept for CVE-2020-0137, an Android autofill vulnerability. The code includes test cases demonstrating the exploit by manipulating autofill services and callbacks.
Description
In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141920289
Exploits (2)
This repository contains a proof-of-concept for CVE-2020-0137, an Android autofill vulnerability. The code includes test cases demonstrating the exploit by manipulating autofill services and callbacks.
This repository contains a proof-of-concept exploit for CVE-2020-0137, targeting Android's autofill framework. The code demonstrates how an attacker could manipulate autofill services to trigger unintended behavior, potentially leading to privilege escalation or information disclosure.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H