Cisco Telephony Priv Escalation via Permission Bypass (CVE-2024-20015)
CVE-2024-20015 Published on February 5, 2024

In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441419; Issue ID: ALPS08441419.

NVD

Vulnerability Analysis

CVE-2024-20015 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Authentication Bypass by Primary Weakness

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.


Products Associated with CVE-2024-20015

Want to know whenever a new CVE is published for MediaTek products? stack.watch will email you.

MediaTek Mt6739
 
MediaTek Mt6753
 
MediaTek Mt6757
 
MediaTek Mt6761
 
MediaTek Mt6762
 
MediaTek Mt6763
 
MediaTek Mt6765
 
MediaTek Mt6768
 
MediaTek Mt6769
 
MediaTek Mt6781
 
MediaTek Mt6833
 
MediaTek Mt6835
 
MediaTek Mt6853
 
MediaTek Mt6855
 
MediaTek Mt6873
 
MediaTek Mt6875
 
MediaTek Mt6877
 
MediaTek Mt6879
 
MediaTek Mt6883
 
MediaTek Mt6885
 
MediaTek Mt6886
 
MediaTek Mt6889
 
MediaTek Mt6893
 
MediaTek Mt6895
 
MediaTek Mt6983
 
MediaTek Mt6985
 
MediaTek Mt8321
 
MediaTek Mt8667
 
MediaTek Mt8673
 
MediaTek Mt8765
 
MediaTek Mt8766
 
MediaTek Mt8768
 
MediaTek Mt8781
 
MediaTek Mt8786
 
MediaTek Mt8788
 
MediaTek Mt8789
 
MediaTek Mt8791t
 
MediaTek Mt8797
 
MediaTek Mt8798
 

Affected Versions

MediaTek, Inc. MT6739, MT6753, MT6757, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6781, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8321, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798: mediatek mt6739: mediatek mt6753: mediatek mt6757: mediatek mt6761: mediatek mt6762: mediatek mt6763: mediatek mt6765: mediatek mt6768: mediatek mt6769: mediatek mt6781: mediatek mt6833: mediatek mt6835: mediatek mt6853: mediatek mt6855: mediatek mt6873: mediatek mt6875: mediatek mt6877: mediatek mt6879: mediatek mt6883: mediatek mt6885: mediatek mt6886: mediatek mt6889: mediatek mt6893: mediatek mt6895: mediatek mt6983: mediatek mt6985: mediatek mt8321: mediatek mt8667: mediatek mt8673: mediatek mt8765: mediatek mt8766: mediatek mt8768: mediatek mt8781: mediatek mt8786: mediatek mt8788: mediatek mt8789: mediatek mt8791t: mediatek mt8797: mediatek mt8798:

Exploit Probability

EPSS
0.01%
Percentile
1.45%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.