Read the docs
TI-2020-09985 Aliases CVE-2020-12488GHSA-f5hm-23c6-pq5v

Broken Access Control Vulnerability in Jovi Smart Scene

Priority LOW 24CWE-284Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Security bypass, Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284, CWE-668 and the CVSS impact.

Summary

The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission.

Why it matters now

EPSS 0.00208 10th percentileScored 2026-11-07
Fix Fixed Jovi Smart Scene (vivo): all

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
vivoJovi Smart Scene6.2.2.52 to before allallPatch availableCNA
  • Jovi Smart Scene Vendorvivo Affected 6.2.2.52 to before all Fixed in all Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:vivo:jovi_smart_scene:*:*:*:*:*:*:*:*before 6.2.2.52Vulnerablevivo
  • cpe:2.3:a:vivo:jovi_smart_scene:*:*:*:*:*:*:*:* Versions before 6.2.2.52 Vulnerable ·vivo

Remediation

  • Fix · CNA Jovi Smart Scene (vivo) Fixed in all

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-12488
  2. 2026-10-03 Alias added: GHSA-f5hm-23c6-pq5v

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences