CVE-2020-27402 | BDVDB-2026-144243 Detail

Description#

The HK1 Box S905X3 TV Box contains a vulnerability that allows a local unprivileged user to escalate to root using the /system/xbin/su binary via a serial port (UART) connection or using adb.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://threatpost.com/authentication-bug-android-smart-tv-data-theft/160025/
https://www.cybersecurity-help.cz/vdb/SB2020101404
https://www.securitylab.ru/news/513051.php
https://sick.codes/sick-2020-004/
https://github.com/sickcodes/security/blob/master/advisories/SICK-2020-004.md

Exploit#

No public exploit known

History#

Version 12020-11-05Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.