Arbitrary Command Execution Vulnerability in Oppo QualityProtect
CVE-2020-11830

9.8CRITICAL

Key Information:

Vendor

Oppo

Status
Com.oppo.qualityprotect
Vendor
CVE Published:
19 November 2020

What is CVE-2020-11830?

The Oppo QualityProtect application, specifically version V2.0, contains a vulnerability that allows attackers to execute arbitrary system commands. This could potentially result in unauthorized access and control over the affected system, posing significant risks to users and their data. It is crucial for users of the affected product to apply security updates and patches to mitigate the risk associated with this vulnerability.

Affected Version(s)

com.oppo.qualityprotect V2.0

References

https://security.oppo.com/en/noticedetails.html?noticeId=...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.