Lucene search

[email protected]CVE-2018-11958

HistoryApr 04, 2019 - 3:29 p.m.

CVE-2018-11958

2019-04-0415:29:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2018-11958

insufficient protection

keypad

hlos

snapdragon

confidential data

security vulnerability

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

11.8%

JSON

Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650, MDM9655, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016

CPENameOperatorVersion
qualcomm:mdm9206_firmwarequalcomm mdm9206 firmwareeq-
qualcomm:mdm9607_firmwarequalcomm mdm9607 firmwareeq-
qualcomm:mdm9650_firmwarequalcomm mdm9650 firmwareeq-
qualcomm:mdm9655_firmwarequalcomm mdm9655 firmwareeq-
qualcomm:qm215_firmwarequalcomm qm215 firmwareeq-
qualcomm:sd_210_firmwarequalcomm sd 210 firmwareeq-
qualcomm:sd_212_firmwarequalcomm sd 212 firmwareeq-
qualcomm:sd_205_firmwarequalcomm sd 205 firmwareeq-
qualcomm:sd_410_firmwarequalcomm sd 410 firmwareeq-
qualcomm:sd_412_firmwarequalcomm sd 412 firmwareeq-

CPE	Name	Operator	Version
qualcomm:mdm9206_firmware	qualcomm mdm9206 firmware	eq	-
qualcomm:mdm9607_firmware	qualcomm mdm9607 firmware	eq	-
qualcomm:mdm9650_firmware	qualcomm mdm9650 firmware	eq	-
qualcomm:mdm9655_firmware	qualcomm mdm9655 firmware	eq	-
qualcomm:qm215_firmware	qualcomm qm215 firmware	eq	-
qualcomm:sd_210_firmware	qualcomm sd 210 firmware	eq	-
qualcomm:sd_212_firmware	qualcomm sd 212 firmware	eq	-
qualcomm:sd_205_firmware	qualcomm sd 205 firmware	eq	-
qualcomm:sd_410_firmware	qualcomm sd 410 firmware	eq	-
qualcomm:sd_412_firmware	qualcomm sd 412 firmware	eq	-

Rows per page:

1-10 of 301

References

www.qualcomm.com/company/product-security/bulletins

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2018-11958

android1 prion1 threatpost1