Lucene search

[email protected]CVE-2020-11185

HistoryJan 21, 2021 - 10:15 a.m.

CVE-2020-11185

2021-01-2110:15:14

CWE-787

[email protected]

web.nvd.nist.gov

cve-2020-11185

wlan driver

firmware validation

snapdragon auto

snapdragon connectivity

snapdragon consumer electronics connectivity

snapdragon mobile

snapdragon wired infrastructure

networking

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Affected configurations

NVD

Node

qualcommar9380Match-

qualcommcsr8811Match-

qualcommipq4018Match-

qualcommipq4019Match-

qualcommipq4028Match-

qualcommipq4029Match-

qualcommipq6000Match-

qualcommipq6005Match-

qualcommipq6010Match-

qualcommipq6018Match-

qualcommipq6028Match-

qualcommipq8064Match-

qualcommipq8065Match-

qualcommipq8068Match-

qualcommipq8070Match-

qualcommipq8070aMatch-

qualcommipq8071Match-

qualcommipq8071aMatch-

qualcommipq8072Match-

qualcommipq8072aMatch-

qualcommipq8074Match-

qualcommipq8074aMatch-

qualcommipq8076Match-

qualcommipq8076aMatch-

qualcommipq8078Match-

qualcommipq8078aMatch-

qualcommipq8173Match-

qualcommipq8174Match-

qualcommpm3003aMatch-

qualcommpm7350cMatch-

qualcommpm8008Match-

qualcommpm8009Match-

qualcommpm8350Match-

qualcommpm8350bMatch-

qualcommpm8350bhMatch-

qualcommpm8350bhsMatch-

qualcommpm8350cMatch-

qualcommpmk7350Match-

qualcommpmk8002Match-

qualcommpmk8350Match-

qualcommpmm6155auMatch-

qualcommpmm8155auMatch-

qualcommpmm8195auMatch-

qualcommpmm855auMatch-

qualcommpmr525Match-

qualcommpmr735aMatch-

qualcommpmr735bMatch-

qualcommpmx55Match-

qualcommqat3514Match-

qualcommqat3516Match-

qualcommqat3518Match-

qualcommqat3519Match-

qualcommqat3555Match-

qualcommqat5515Match-

qualcommqat5516Match-

qualcommqat5522Match-

qualcommqat5568Match-

qualcommqca4024Match-

qualcommqca6175aMatch-

qualcommqca6390Match-

qualcommqca6391Match-

qualcommqca6428Match-

qualcommqca6438Match-

qualcommqca6564aMatch-

qualcommqca6564auMatch-

qualcommqca6574Match-

qualcommqca6574aMatch-

qualcommqca6574auMatch-

qualcommqca6584auMatch-

qualcommqca6595Match-

qualcommqca6595auMatch-

qualcommqca6696Match-

qualcommqca7500Match-

qualcommqca8072Match-

qualcommqca8075Match-

qualcommqca8081Match-

qualcommqca9880Match-

qualcommqca9886Match-

qualcommqca9888Match-

qualcommqca9889Match-

qualcommqca9898Match-

qualcommqca9980Match-

qualcommqca9984Match-

qualcommqca9985Match-

qualcommqca9990Match-

qualcommqca9992Match-

qualcommqca9994Match-

qualcommqcn5021Match-

qualcommqcn5022Match-

qualcommqcn5024Match-

qualcommqcn5052Match-

qualcommqcn5054Match-

qualcommqcn5064Match-

qualcommqcn5121Match-

qualcommqcn5122Match-

qualcommqcn5124Match-

qualcommqcn5152Match-

qualcommqcn5154Match-

qualcommqcn5164Match-

qualcommqcn5550Match-

qualcommqcn7605Match-

qualcommqcn7606Match-

qualcommqcn9000Match-

qualcommqcn9074Match-

qualcommqdm2307Match-

qualcommqdm2308Match-

qualcommqdm2310Match-

qualcommqdm3301Match-

qualcommqdm3302Match-

qualcommqdm4643Match-

qualcommqdm4650Match-

qualcommqdm5579Match-

qualcommqdm5620Match-

qualcommqdm5621Match-

qualcommqdm5670Match-

qualcommqdm5671Match-

qualcommqdm5677Match-

qualcommqdm5679Match-

qualcommqet5100Match-

qualcommqet5100mMatch-

qualcommqet6100Match-

qualcommqet6110Match-

qualcommqfs2530Match-

qualcommqfs2580Match-

qualcommqfs2608Match-

qualcommqfs2630Match-

qualcommqln4642Match-

qualcommqln4650Match-

qualcommqln5020Match-

qualcommqln5030Match-

qualcommqln5040Match-

qualcommqpa2625Match-

qualcommqpa5461Match-

qualcommqpa5580Match-

qualcommqpa5581Match-

qualcommqpa6560Match-

qualcommqpa8801Match-

qualcommqpa8802Match-

qualcommqpa8803Match-

qualcommqpa8821Match-

qualcommqpa8842Match-

qualcommqpm4621Match-

qualcommqpm4630Match-

qualcommqpm4640Match-

qualcommqpm4641Match-

qualcommqpm4650Match-

qualcommqpm5621Match-

qualcommqpm5641Match-

qualcommqpm5670Match-

qualcommqpm5677Match-

qualcommqpm5679Match-

qualcommqpm5870Match-

qualcommqpm5875Match-

qualcommqpm6585Match-

qualcommqpm6621Match-

qualcommqpm6670Match-

qualcommqpm8820Match-

qualcommqpm8870Match-

qualcommqtm525Match-

qualcommsa6145pMatch-

qualcommsa6155pMatch-

qualcommsa8150pMatch-

qualcommsa8155Match-

qualcommsa8155pMatch-

qualcommsa8195pMatch-

qualcommsd8885gMatch-

qualcommsdr660gMatch-

qualcommsdr735Match-

qualcommsdr735gMatch-

qualcommsdr8250Match-

qualcommsdr865Match-

qualcommsdx55Match-

qualcommsdx55mMatch-

qualcommsm7350Match-

qualcommsmb1394Match-

qualcommsmb1395Match-

qualcommsmb1396Match-

qualcommsmb1398Match-

qualcommsmr525Match-

qualcommsmr526Match-

qualcommsmr545Match-

qualcommsmr546Match-

qualcommwcd9341Match-

qualcommwcd9380Match-

qualcommwcd9385Match-

qualcommwcn3910Match-

qualcommwcn3991Match-

qualcommwcn3998Match-

qualcommwcn6740Match-

qualcommwcn6750Match-

qualcommwcn6850Match-

qualcommwcn6851Match-

qualcommwcn6856Match-

qualcommwsa8830Match-

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:ar9380qualcomm ar9380eq-
qualcomm:csr8811qualcomm csr8811eq-
qualcomm:ipq4018qualcomm ipq4018eq-
qualcomm:ipq4019qualcomm ipq4019eq-
qualcomm:ipq4028qualcomm ipq4028eq-
qualcomm:ipq4029qualcomm ipq4029eq-
qualcomm:ipq6000qualcomm ipq6000eq-
qualcomm:ipq6005qualcomm ipq6005eq-
qualcomm:ipq6010qualcomm ipq6010eq-
qualcomm:ipq6018qualcomm ipq6018eq-

CPE	Name	Operator	Version
qualcomm:ar9380	qualcomm ar9380	eq	-
qualcomm:csr8811	qualcomm csr8811	eq	-
qualcomm:ipq4018	qualcomm ipq4018	eq	-
qualcomm:ipq4019	qualcomm ipq4019	eq	-
qualcomm:ipq4028	qualcomm ipq4028	eq	-
qualcomm:ipq4029	qualcomm ipq4029	eq	-
qualcomm:ipq6000	qualcomm ipq6000	eq	-
qualcomm:ipq6005	qualcomm ipq6005	eq	-
qualcomm:ipq6010	qualcomm ipq6010	eq	-
qualcomm:ipq6018	qualcomm ipq6018	eq	-

Rows per page:

1-10 of 1951

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AR9380, CSR8811, IPQ4018, IPQ4019, IPQ4028, IPQ4029, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8065, IPQ8068, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, PM3003A, PM7350C, PM8008, PM8009, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PMK7350, PMK8002, PMK8350, PMM6155AU, PMM8155AU, PMM8195AU, PMM855AU, PMR525, PMR735A, PMR735B, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3555, QAT5515, QAT5516, QAT5522, QAT5568, QCA4024, QCA6175A, QCA6390, QCA6391, QCA6428, QCA6438, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6696, QCA7500, QCA8072, QCA8075, QCA8081, QCA9880, QCA9886, QCA9888, QCA9889, QCA9898, QCA9980, QCA9984, QCA9985, QCA9990, QCA9992, QCA9994, QCN5021, QCN5022, QCN5024, QCN5052, QCN5054, QCN5064, QCN5121, QCN5122, QCN5124, QCN5152, QCN5154, QCN5164, QCN5550, QCN7605, QCN7606, QCN9000, QCN9074, QDM2307, QDM2308, QDM2310, QDM3301, QDM3302, QDM4643 ...[truncated*]"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/december-2020-bulletin

www.qualcomm.com/company/product-security/bulletins/december-2020-security-bulletin

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2020-11185

nvd1 prion1 cvelist1