Lucene search

[email protected]CVE-2020-11266

HistoryJun 09, 2021 - 5:15 a.m.

CVE-2020-11266

2021-06-0905:15:07

[email protected]

web.nvd.nist.gov

cve-2020-11266

image address

dereferenced

validation

qsee

information leakage

snapdragon

wired infrastructure

networking

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

12.8%

JSON

Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking

Affected configurations

NVD

Node

qualcommar7420_firmwareMatch-

AND

qualcommar7420Match-

Node

qualcommar9580_firmwareMatch-

AND

qualcommar9580Match-

Node

qualcommcsr8811_firmwareMatch-

AND

qualcommcsr8811Match-

Node

qualcommipq4018_firmwareMatch-

AND

qualcommipq4018Match-

Node

qualcommipq4019_firmwareMatch-

AND

qualcommipq4019Match-

Node

qualcommipq4028_firmwareMatch-

AND

qualcommipq4028Match-

Node

qualcommipq4029_firmwareMatch-

AND

qualcommipq4029Match-

Node

qualcommqca10901_firmwareMatch-

AND

qualcommqca10901Match-

Node

qualcommqca4024_firmwareMatch-

AND

qualcommqca4024Match-

Node

qualcommqca7500_firmwareMatch-

AND

qualcommqca7500Match-

Node

qualcommqca7520_firmwareMatch-

AND

qualcommqca7520Match-

Node

qualcommqca7550_firmwareMatch-

AND

qualcommqca7550Match-

Node

qualcommqca8075_firmwareMatch-

AND

qualcommqca8075Match-

Node

qualcommqca9880_firmwareMatch-

AND

qualcommqca9880Match-

Node

qualcommqca9886_firmwareMatch-

AND

qualcommqca9886Match-

Node

qualcommqca9888_firmwareMatch-

AND

qualcommqca9888Match-

Node

qualcommqca9889_firmwareMatch-

AND

qualcommqca9889Match-

Node

qualcommqca9898_firmwareMatch-

AND

qualcommqca9898Match-

Node

qualcommqca9984_firmwareMatch-

AND

qualcommqca9984Match-

Node

qualcommqca9992_firmwareMatch-

AND

qualcommqca9992Match-

Node

qualcommqca9994_firmwareMatch-

AND

qualcommqca9994Match-

Node

qualcommqcn3018_firmwareMatch-

AND

qualcommqcn3018Match-

Node

qualcommqfe1922_firmwareMatch-

AND

qualcommqfe1922Match-

Node

qualcommqfe1952_firmwareMatch-

AND

qualcommqfe1952Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

CPENameOperatorVersion
qualcomm:ar7420_firmwarequalcomm ar7420 firmwareeq-

CPE	Name	Operator	Version
qualcomm:ar7420_firmware	qualcomm ar7420 firmware	eq	-

CNA Affected

[
  {
    "product": "Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AR7420, AR9580, CSR8811, IPQ4018, IPQ4019, IPQ4028, IPQ4029, QCA10901, QCA4024, QCA7500, QCA7520, QCA7550, QCA8075, QCA9880, QCA9886, QCA9888, QCA9889, QCA9898, QCA9984, QCA9992, QCA9994, QCN3018, QFE1922, QFE1952, WCD9340, WSA8810"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Social References

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVE-2020-11266

nvd1 prion1 cvelist1