VULNERABILITY INTELLIGENCE
CVE-2020-0016
CVSS score7.8 HIGH
EPSS probability0.18%
CISA KEVNot currently listed
Published2020-12-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483
Weakness classification
- nvd@nist.gov: CWE-798
Primary references
- security@android.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory