CVE-2020-27055: 
NixOS vulnerability analysis and mitigation

In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi configuration due to improper input validation. This vulnerability, identified as CVE-2020-27055, affects Android 11 and could lead to remote information disclosure without requiring additional execution privileges or user interaction (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating a high severity issue. The vulnerability is related to Missing Encryption of Sensitive Data (CWE-311) and affects the WiFi configuration components of Android 11 (NVD).

The vulnerability allows remote attackers to obtain sensitive information without requiring additional execution privileges. The high confidentiality impact (C:H) in the CVSS score indicates that the vulnerability could lead to significant information disclosure (NVD).

The vulnerability has high exploitability characteristics as indicated by its CVSS metrics: Network accessibility (AV:N), Low attack complexity (AC:L), No privileges required (PR:N), and No user interaction needed (UI:N). This makes the vulnerability relatively straightforward to exploit for potential attackers (NVD).

The vulnerability was addressed in the Android Security Bulletin for December 2020. Users should ensure their Android devices are updated with the latest security patches (Android Bulletin).