CVE-2020-36528

6.5 mediumEPSS 0.8%

Medium (6.5) in platinumchina platinum mobile. EPSS 0.8% chance of exploitation in the next 30 days.

A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Upgrading to version 1.0.4.851 is able to address this issue. It is recommended to upgrade the affected component.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-264
Published: 2022-06-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

platinumchina:platinum_mobile

References

http://seclists.org/fulldisclosure/2020/Oct/4
https://vuldb.com/?id.162264
http://seclists.org/fulldisclosure/2020/Oct/4
https://vuldb.com/?id.162264

Check your stack JSON