Lucene search

[email protected]CVE-2020-11157

HistoryNov 02, 2020 - 7:15 a.m.

CVE-2020-11157

2020-11-0207:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2020-11157

dos

snapdragon

encryption

connection

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

47.3%

JSON

u’Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS’ in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8076, MDM9640, MDM9650, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, QCA6174A, QCA9886, QCM2150, QM215, SDM429, SDM439, SDM450, SDM632

CPENameOperatorVersion
qualcomm:apq8053_firmwarequalcomm apq8053 firmwareeq-
qualcomm:apq8076_firmwarequalcomm apq8076 firmwareeq-
qualcomm:mdm9640_firmwarequalcomm mdm9640 firmwareeq-
qualcomm:mdm9650_firmwarequalcomm mdm9650 firmwareeq-
qualcomm:msm8905_firmwarequalcomm msm8905 firmwareeq-
qualcomm:msm8917_firmwarequalcomm msm8917 firmwareeq-
qualcomm:msm8937_firmwarequalcomm msm8937 firmwareeq-
qualcomm:msm8940_firmwarequalcomm msm8940 firmwareeq-
qualcomm:msm8953_firmwarequalcomm msm8953 firmwareeq-
qualcomm:qca6174a_firmwarequalcomm qca6174a firmwareeq-

CPE	Name	Operator	Version
qualcomm:apq8053_firmware	qualcomm apq8053 firmware	eq	-
qualcomm:apq8076_firmware	qualcomm apq8076 firmware	eq	-
qualcomm:mdm9640_firmware	qualcomm mdm9640 firmware	eq	-
qualcomm:mdm9650_firmware	qualcomm mdm9650 firmware	eq	-
qualcomm:msm8905_firmware	qualcomm msm8905 firmware	eq	-
qualcomm:msm8917_firmware	qualcomm msm8917 firmware	eq	-
qualcomm:msm8937_firmware	qualcomm msm8937 firmware	eq	-
qualcomm:msm8940_firmware	qualcomm msm8940 firmware	eq	-
qualcomm:msm8953_firmware	qualcomm msm8953 firmware	eq	-
qualcomm:qca6174a_firmware	qualcomm qca6174a firmware	eq	-

Rows per page:

1-10 of 171

References

www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

47.3%

JSON

Related for CVE-2020-11157

prion1