Lucene search

[email protected]CVE-2020-11242

HistoryApr 07, 2021 - 8:15 a.m.

CVE-2020-11242

2021-04-0708:15:14

[email protected]

web.nvd.nist.gov

cve-2020-11242

memory access

security

snapdragon

industrial iot

mobile

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile

Affected configurations

NVD

Node

qualcommpm660_firmwareMatch-

AND

qualcommpm660Match-

Node

qualcommpm660a_firmwareMatch-

AND

qualcommpm660aMatch-

Node

qualcommpm660l_firmwareMatch-

AND

qualcommpm660lMatch-

Node

qualcommpm855a_firmwareMatch-

AND

qualcommpm855aMatch-

Node

qualcommpmm855au_firmwareMatch-

AND

qualcommpmm855auMatch-

Node

qualcommqat3514_firmwareMatch-

AND

qualcommqat3514Match-

Node

qualcommqat3522_firmwareMatch-

AND

qualcommqat3522Match-

Node

qualcommqat3550_firmwareMatch-

AND

qualcommqat3550Match-

Node

qualcommqca6564a_firmwareMatch-

AND

qualcommqca6564aMatch-

Node

qualcommqca6564au_firmwareMatch-

AND

qualcommqca6564auMatch-

Node

qualcommqca6574a_firmwareMatch-

AND

qualcommqca6574aMatch-

Node

qualcommqca6574au_firmwareMatch-

AND

qualcommqca6574auMatch-

Node

qualcommqca6595_firmwareMatch-

AND

qualcommqca6595Match-

Node

qualcommqca6595au_firmwareMatch-

AND

qualcommqca6595auMatch-

Node

qualcommqet4100_firmwareMatch-

AND

qualcommqet4100Match-

Node

qualcommqet4101_firmwareMatch-

AND

qualcommqet4101Match-

Node

qualcommqet4200aq_firmwareMatch-

AND

qualcommqet4200aqMatch-

Node

qualcommqln1021aq_firmwareMatch-

AND

qualcommqln1021aqMatch-

Node

qualcommqln1031_firmwareMatch-

AND

qualcommqln1031Match-

Node

qualcommqln1036aq_firmwareMatch-

AND

qualcommqln1036aqMatch-

Node

qualcommqpa4340_firmwareMatch-

AND

qualcommqpa4340Match-

Node

qualcommqpa4360_firmwareMatch-

AND

qualcommqpa4360Match-

Node

qualcommqpa5460_firmwareMatch-

AND

qualcommqpa5460Match-

Node

qualcommqtc800h_firmwareMatch-

AND

qualcommqtc800hMatch-

Node

qualcommqtc800s_firmwareMatch-

AND

qualcommqtc800sMatch-

Node

qualcommrsw8577_firmwareMatch-

AND

qualcommrsw8577Match-

Node

qualcommsd455_firmwareMatch-

AND

qualcommsd455Match-

Node

qualcommsd636_firmwareMatch-

AND

qualcommsd636Match-

Node

qualcommsd660_firmwareMatch-

AND

qualcommsd660Match-

Node

qualcommsdm630_firmwareMatch-

AND

qualcommsdm630Match-

Node

qualcommsdr660_firmwareMatch-

AND

qualcommsdr660Match-

Node

qualcommsmb1351_firmwareMatch-

AND

qualcommsmb1351Match-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3990_firmwareMatch-

AND

qualcommwcn3990Match-

CPENameOperatorVersion
qualcomm:pm660_firmwarequalcomm pm660 firmwareeq-

CPE	Name	Operator	Version
qualcomm:pm660_firmware	qualcomm pm660 firmware	eq	-

CNA Affected

[
  {
    "product": "Snapdragon Industrial IOT, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "PM660, PM660A, PM660L, PM855A, PMM855AU, QAT3514, QAT3522, QAT3550, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCA6595, QCA6595AU, QET4100, QET4101, QET4200AQ, QLN1021AQ, QLN1031, QLN1036AQ, QPA4340, QPA4360, QPA5460, QTC800H, QTC800S, RSW8577, SD 455, SD 636, SD660, SDM630, SDR660, SMB1351, WCD9335, WCD9340, WCD9341, WCN3950, WCN3980, WCN3990"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2020-11242

cvelist1 nvd1 prion1