CVE-2020-10072

MEDIUM Year: 2020
CVSS v3 Score
5.3
Medium
CVSS v2 Score
4.6
Medium
Weakness Type
CWE-280
View all →

Vulnerability Description

Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges (CWE-280). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc

Related Vulnerabilities

CVE-2020-26195

MEDIUM
CVSS:5.3(Medium)

Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a user. A remote unauthenticated attacker may take ad...

CWE-2802020

CVE-2021-37175

MEDIUM
CVSS:5.3(Medium)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501...

CWE-2802021

CVE-2022-30716

MEDIUM
CVSS:5.3(Medium)

Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release 1 allows untrusted applications to access toast message information from device.

CWE-2802022

CVE-2023-39249

MEDIUM
CVSS:5.3(Medium)

Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportA...

CWE-2802023

CVE-2023-6189

MEDIUM
CVSS:5.3(Medium)

Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods.

CWE-2802023

CVE-2024-22077

MEDIUM
CVSS:5.3(Medium)

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The SQLite database file has weak permissions.

CWE-2802024