CVE-2019-20472

An issue was discovered on One2Track 2019-12-08 devices

Medium · published November 7, 2024

CVSS v3.1
6.2
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

An issue was discovered on One2Track 2019-12-08 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a "Remove PIN and restart!" message, and cannot be used. This makes it easier for an attacker to use the SIM card by stealing the device.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Published
2024-11-07T00:00Z
EPSS history
Timeline
  • 07 NOV 00:00Z
    An issue was discovered on One2Track 2019-12-08 devices
    cvelistv5