CVE Catalog
CVE-2020-28715
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.77%
51th percentile - higher than 51% of all known CVEs
Summary
An issue was discovered in the kdmserver service on LeEco LeTV X43 version V2401RCN02C080080B04121S, allowing attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS).
Risk Assessment
The risk for the organization includes potential takeover of the device, leading to data confidentiality breaches and service disruption.
Recommendation
It is recommended to immediately apply security patches provided by the vendor and restrict access to the kdmserver service to trusted networks only.
Original NVD description (English source)
An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS).