CVE-2025-20896

CVSS 3.1 Score 4 of 10 (medium)

Details

Published Feb 4, 2025

Summary

CVE-2025-20896 is a vulnerability affecting EasySetup before version 11.1.18. This issue arises due to the use of implicit intents for sensitive communication. Local attackers can exploit this weakness to gain unauthorized access to confidential information. This vulnerability poses a risk if an attacker is able to establish a connection to the affected system. It is recommended that users upgrade to the latest version of EasySetup to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share