Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-14982

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS application. The LG ID is LVE-SMP-180004.

Published

2018-08-17T20:29:16.413

Last Modified

2024-11-21T03:50:14.773

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System google android 6.0 Yes
Operating System google android 6.0.1 Yes
Operating System google android 7.0 Yes
Operating System google android 7.1 Yes
Operating System google android 7.2 Yes
Operating System google android 8.0 Yes
Operating System google android 8.1 Yes
Hardware lg g5 - No
Hardware lg g6 - No
Hardware lg g6\+ - No
Hardware lg q6 - No
Hardware lg q8 - No
Hardware lg v10 - No
Hardware lg v20 - No
Hardware lg v30 - No
Hardware lg v30\+ - No
Hardware lg v30s_thinq - No
Hardware lg x_cam - No
Hardware lg x300 - No
Hardware lg x400 - No
Hardware lg x500 - No
References