CVE-2024-20821

A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mode, which disables security features

Medium · published May 7, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mode, which disables security features. This attack needs additional privilege to control TEE.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00164 · 5.3th percentile
Published
2024-05-07T04:25Z
EPSS history
Timeline
  • 07 MAY 04:25Z
    A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mode, which disables security features
    cvelistv5