Security readout for executives and security teams
Plain-English summary
CVE-2020-28345 affects LG mobile devices running Android OS 10. The reported impact is that the Wi-Fi subsystem may crash because a NULL parameter check is missing. The source bundle does not provide CVSS, model list, patch details, or evidence of exploitation.
Executive priority
Treat this as a targeted mobile fleet hygiene issue, not an emergency based on current evidence. Prioritize if LG Android 10 devices remain in business use, especially in operational environments dependent on reliable wireless connectivity.
Technical view
The CVE describes a NULL parameter validation flaw in the Wi-Fi subsystem on LG Android 10 mobile software, tracked by LG as LVE-SMP-200025 in November 2020. Available sources describe a crash condition only; they do not provide affected model granularity, CWE mapping, exploitability details, or remediation specifics.
Likely exposure
Exposure is most likely limited to LG mobile devices that still run Android OS 10 software. The bundle does not identify exact LG models, firmware builds, carriers, or regions, so asset inventory and vendor bulletin checks are required.
Exploitation context
No source in the bundle reports active exploitation, and the CVE is not marked as CISA KEV. The described effect is a Wi-Fi subsystem crash, but the sources do not explain prerequisites, attack range, user interaction, or reliability.
Researcher notes
The public bundle is sparse: no CVSS, CWE, affected CPEs, model list, exploit status, or patch detail is included. Analysis should stay limited to the stated NULL check failure and Wi-Fi crash impact until LG bulletin details are confirmed.
Mitigation direction
- Identify LG Android 10 devices in managed and unmanaged fleets.
- Check LG guidance for LVE-SMP-200025 and applicable November 2020 security updates.
- Apply vendor-supported firmware or security updates where available.
- Retire or isolate unsupported LG Android 10 devices from sensitive workflows.
- Monitor mobile device management logs for repeated Wi-Fi subsystem instability.
Validation and detection
- Confirm device make, Android version, and security patch level through MDM inventory.
- Map discovered devices against LG bulletin information for LVE-SMP-200025.
- Verify whether vendor updates are available for each model and carrier build.
- Review helpdesk or telemetry records for recurring Wi-Fi crashes on LG Android 10 devices.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2020-28345 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://lgsecurity.lge.com/CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.