Lucene search

[email protected]CVE-2020-11284

HistoryMay 07, 2021 - 9:15 a.m.

CVE-2020-11284

2021-05-0709:15:07

CWE-667

[email protected]

web.nvd.nist.gov

cve-2020-11284

locked memory

secure boot loader

snapdragon auto

snapdragon compute

snapdragon industrial iot

snapdragon mobile

snapdragon wired infrastructure

networking

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Affected configurations

NVD

Node

qualcommaqt1000_firmwareMatch-

AND

qualcommaqt1000Match-

Node

qualcommar8035_firmwareMatch-

AND

qualcommar8035Match-

Node

qualcommpm3003a_firmwareMatch-

AND

qualcommpm3003aMatch-

Node

qualcommpm4125_firmwareMatch-

AND

qualcommpm4125Match-

Node

qualcommpm4250_firmwareMatch-

AND

qualcommpm4250Match-

Node

qualcommpm6125_firmwareMatch-

AND

qualcommpm6125Match-

Node

qualcommpm6150_firmwareMatch-

AND

qualcommpm6150Match-

Node

qualcommpm6150a_firmwareMatch-

AND

qualcommpm6150aMatch-

Node

qualcommpm6150l_firmwareMatch-

AND

qualcommpm6150lMatch-

Node

qualcommpm6350_firmwareMatch-

AND

qualcommpm6350Match-

Node

qualcommpm640a_firmwareMatch-

AND

qualcommpm640aMatch-

Node

qualcommpm640l_firmwareMatch-

AND

qualcommpm640lMatch-

Node

qualcommpm640p_firmwareMatch-

AND

qualcommpm640pMatch-

Node

qualcommpm7250b_firmwareMatch-

AND

qualcommpm7250bMatch-

Node

qualcommpm8004_firmwareMatch-

AND

qualcommpm8004Match-

Node

qualcommpm8005_firmwareMatch-

AND

qualcommpm8005Match-

Node

qualcommpm8008_firmwareMatch-

AND

qualcommpm8008Match-

Node

qualcommpm8009_firmwareMatch-

AND

qualcommpm8009Match-

Node

qualcommpm8150a_firmwareMatch-

AND

qualcommpm8150aMatch-

Node

qualcommpm8150b_firmwareMatch-

AND

qualcommpm8150bMatch-

Node

qualcommpm8150c_firmwareMatch-

AND

qualcommpm8150cMatch-

Node

qualcommpm8150l_firmwareMatch-

AND

qualcommpm8150lMatch-

Node

qualcommpm8250_firmwareMatch-

AND

qualcommpm8250Match-

Node

qualcommpm8350_firmwareMatch-

AND

qualcommpm8350Match-

Node

qualcommpm855_firmwareMatch-

AND

qualcommpm855Match-

Node

qualcommpm855b_firmwareMatch-

AND

qualcommpm855bMatch-

Node

qualcommpm855l_firmwareMatch-

AND

qualcommpm855lMatch-

Node

qualcommpm855p_firmwareMatch-

AND

qualcommpm855pMatch-

Node

qualcommpm8998_firmwareMatch-

AND

qualcommpm8998Match-

Node

qualcommpmd9655_firmwareMatch-

AND

qualcommpmd9655Match-

Node

qualcommpmi632_firmwareMatch-

AND

qualcommpmi632Match-

Node

qualcommpmi8998_firmwareMatch-

AND

qualcommpmi8998Match-

Node

qualcommpmk8002_firmwareMatch-

AND

qualcommpmk8002Match-

Node

qualcommpmk8003_firmwareMatch-

AND

qualcommpmk8003Match-

Node

qualcommpmm8195au_firmwareMatch-

AND

qualcommpmm8195auMatch-

Node

qualcommpmm855au_firmwareMatch-

AND

qualcommpmm855auMatch-

Node

qualcommpmr525_firmwareMatch-

AND

qualcommpmr525Match-

Node

qualcommpmx24_firmwareMatch-

AND

qualcommpmx24Match-

Node

qualcommpmx55_firmwareMatch-

AND

qualcommpmx55Match-

Node

qualcommqat3522_firmwareMatch-

AND

qualcommqat3522Match-

Node

qualcommqat3550_firmwareMatch-

AND

qualcommqat3550Match-

Node

qualcommqbt1500_firmwareMatch-

AND

qualcommqbt1500Match-

Node

qualcommqbt2000_firmwareMatch-

AND

qualcommqbt2000Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6420_firmwareMatch-

AND

qualcommqca6420Match-

Node

qualcommqca6421_firmwareMatch-

AND

qualcommqca6421Match-

Node

qualcommqca6426_firmwareMatch-

AND

qualcommqca6426Match-

Node

qualcommqca6430_firmwareMatch-

AND

qualcommqca6430Match-

Node

qualcommqca6431_firmwareMatch-

AND

qualcommqca6431Match-

Node

qualcommqca6436_firmwareMatch-

AND

qualcommqca6436Match-

Node

qualcommqca6574au_firmwareMatch-

AND

qualcommqca6574auMatch-

Node

qualcommqca6595_firmwareMatch-

AND

qualcommqca6595Match-

Node

qualcommqca9984_firmwareMatch-

AND

qualcommqca9984Match-

Node

qualcommqcm2290_firmwareMatch-

AND

qualcommqcm2290Match-

Node

qualcommqcm4290_firmwareMatch-

AND

qualcommqcm4290Match-

Node

qualcommqcs2290_firmwareMatch-

AND

qualcommqcs2290Match-

Node

qualcommqcs405_firmwareMatch-

AND

qualcommqcs405Match-

Node

qualcommqcs4290_firmwareMatch-

AND

qualcommqcs4290Match-

Node

qualcommqet4101_firmwareMatch-

AND

qualcommqet4101Match-

Node

qualcommqet5100_firmwareMatch-

AND

qualcommqet5100Match-

Node

qualcommqet6100_firmwareMatch-

AND

qualcommqet6100Match-

Node

qualcommqet6105_firmwareMatch-

AND

qualcommqet6105Match-

Node

qualcommqfs2530_firmwareMatch-

AND

qualcommqfs2530Match-

Node

qualcommqfs2580_firmwareMatch-

AND

qualcommqfs2580Match-

Node

qualcommqpa4360_firmwareMatch-

AND

qualcommqpa4360Match-

Node

qualcommqpa5460_firmwareMatch-

AND

qualcommqpa5460Match-

Node

qualcommqpa6560_firmwareMatch-

AND

qualcommqpa6560Match-

Node

qualcommqsw8574_firmwareMatch-

AND

qualcommqsw8574Match-

Node

qualcommqtc410s_firmwareMatch-

AND

qualcommqtc410sMatch-

Node

qualcommqtc800h_firmwareMatch-

AND

qualcommqtc800hMatch-

Node

qualcommqtc800s_firmwareMatch-

AND

qualcommqtc800sMatch-

Node

qualcommqtc801s_firmwareMatch-

AND

qualcommqtc801sMatch-

Node

qualcommqtm525_firmwareMatch-

AND

qualcommqtm525Match-

Node

qualcommsa6155p_firmwareMatch-

AND

qualcommsa6155pMatch-

Node

qualcommsa8195p_firmwareMatch-

AND

qualcommsa8195pMatch-

Node

qualcommsd8c_firmwareMatch-

AND

qualcommsd8cMatch-

Node

qualcommsd8cx_firmwareMatch-

AND

qualcommsd8cxMatch-

Node

qualcommsd460_firmwareMatch-

AND

qualcommsd460Match-

Node

qualcommsd480_firmwareMatch-

AND

qualcommsd480Match-

Node

qualcommsd662_firmwareMatch-

AND

qualcommsd662Match-

Node

qualcommsd675_firmwareMatch-

AND

qualcommsd675Match-

Node

qualcommsd855_firmwareMatch-

AND

qualcommsd855Match-

Node

qualcommsd8655g_firmwareMatch-

AND

qualcommsd8655gMatch-

Node

qualcommsd870_firmwareMatch-

AND

qualcommsd870Match-

Node

qualcommsd8885g_firmwareMatch-

AND

qualcommsd8885gMatch-

Node

qualcommsdm830_firmwareMatch-

AND

qualcommsdm830Match-

Node

qualcommsdr425_firmwareMatch-

AND

qualcommsdr425Match-

Node

qualcommsdr660_firmwareMatch-

AND

qualcommsdr660Match-

Node

qualcommsdr660g_firmwareMatch-

AND

qualcommsdr660gMatch-

Node

qualcommsdr735_firmwareMatch-

AND

qualcommsdr735Match-

Node

qualcommsdr735g_firmwareMatch-

AND

qualcommsdr735gMatch-

Node

qualcommsdr8150_firmwareMatch-

AND

qualcommsdr8150Match-

Node

qualcommsdr8250_firmwareMatch-

AND

qualcommsdr8250Match-

Node

qualcommsdr865_firmwareMatch-

AND

qualcommsdr865Match-

Node

qualcommsdx24_firmwareMatch-

AND

qualcommsdx24Match-

Node

qualcommsdx55_firmwareMatch-

AND

qualcommsdx55Match-

Node

qualcommsdx55m_firmwareMatch-

AND

qualcommsdx55mMatch-

Node

qualcommsdxr25g_firmwareMatch-

AND

qualcommsdxr25gMatch-

Node

qualcommsm4125_firmwareMatch-

AND

qualcommsm4125Match-

Node

qualcommsmb1351_firmwareMatch-

AND

qualcommsmb1351Match-

Node

qualcommsmb1354_firmwareMatch-

AND

qualcommsmb1354Match-

Node

qualcommsmb1355_firmwareMatch-

AND

qualcommsmb1355Match-

Node

qualcommsmb1390_firmwareMatch-

AND

qualcommsmb1390Match-

Node

qualcommsmb1396_firmwareMatch-

AND

qualcommsmb1396Match-

Node

qualcommsmr525_firmwareMatch-

AND

qualcommsmr525Match-

Node

qualcommsmr526_firmwareMatch-

AND

qualcommsmr526Match-

Node

qualcommsmr545_firmwareMatch-

AND

qualcommsmr545Match-

Node

qualcommsmr546_firmwareMatch-

AND

qualcommsmr546Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcd9360_firmwareMatch-

AND

qualcommwcd9360Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3910_firmwareMatch-

AND

qualcommwcn3910Match-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3990_firmwareMatch-

AND

qualcommwcn3990Match-

Node

qualcommwcn3991_firmwareMatch-

AND

qualcommwcn3991Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn3999_firmwareMatch-

AND

qualcommwcn3999Match-

Node

qualcommwgr7640_firmwareMatch-

AND

qualcommwgr7640Match-

Node

qualcommwhs9410_firmwareMatch-

AND

qualcommwhs9410Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwtr2965_firmwareMatch-

AND

qualcommwtr2965Match-

Node

qualcommwtr3925_firmwareMatch-

AND

qualcommwtr3925Match-

Node

qualcommwtr5975_firmwareMatch-

AND

qualcommwtr5975Match-

CPENameOperatorVersion
qualcomm:aqt1000_firmwarequalcomm aqt1000 firmwareeq-

CPE	Name	Operator	Version
qualcomm:aqt1000_firmware	qualcomm aqt1000 firmware	eq	-

CNA Affected

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AQT1000, AR8035, PM3003A, PM4125, PM4250, PM6125, PM6150, PM6150A, PM6150L, PM6350, PM640A, PM640L, PM640P, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM855, PM855B, PM855L, PM855P, PM8998, PMD9655, PMI632, PMI8998, PMK8002, PMK8003, PMM8195AU, PMM855AU, PMR525, PMX24, PMX55, QAT3522, QAT3550, QBT1500, QBT2000, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6574AU, QCA6595, QCA9984, QCM2290, QCM4290, QCS2290, QCS405, QCS4290, QET4101, QET5100, QET6100, QET6105, QFS2530, QFS2580, QPA4360, QPA5460, QPA6560, QSW8574, QTC410S, QTC800H, QTC800S, QTC801S, QTM525, SA6155P, SA8195P, SD 8C, SD 8CX, SD460, SD480, SD662, SD675, SD855, SD865 5G, SD870, SD888 5G, SDM830, SDR425, SDR660, SDR660G, SDR735, SDR735G, SDR8150, SDR8250, SDR865, SDX24, SDX55, SDX55M, SDXR2 5G, SM4125, SMB1351, SMB1354, SMB1355, SMB1390, SMB1396, SMR525, SMR526, SMR545, SMR546, WCD9340, WCD9341, WCD9360, WCD9370, WCD9375, WCD9380, WCD9385, WCN3910, WCN395 ...[truncated*]"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2020-11284

prion1 cvelist1 nvd1