CVE-2026-20435CWE-522

In preloader, there is a possible read of device unique identifiers due to a logic error

Medium · published March 2, 2026

CVSS v3.1
4.6
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00120 · 1.7th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-03-02T08:39Z
EPSS history
Timeline
  • 02 MAR 08:39Z
    In preloader, there is a possible read of device unique identifiers due to a logic error
    cvelistv5