7.8

CVE-2019-10562

EPSS 0.16%
Veröffentlicht 08.09.2020 10:15:12
Zuletzt bearbeitet 21.11.2024 04:19:27
Erkennungen
Login

u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loaded into secure memory and leads to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, Kamorta, MSM8998, Nicobar, QCS404, QCS605, QCS610, Rennell, SA415M, SA6155P, SC7180, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 5

NVD 28 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Ipq6018 Firmware Version -

Qualcomm ≫ Ipq6018 Version -

Qualcomm ≫ Kamorta Firmware Version -

Qualcomm ≫ Kamorta Version -

Qualcomm ≫ Msm8998 Firmware Version -

Qualcomm ≫ Msm8998 Version -

Qualcomm ≫ Nicobar Firmware Version -

Qualcomm ≫ Nicobar Version -

Qualcomm ≫ Qcs404 Firmware Version -

Qualcomm ≫ Qcs404 Version -

Qualcomm ≫ Qcs605 Firmware Version -

Qualcomm ≫ Qcs605 Version -

Qualcomm ≫ Qcs610 Firmware Version -

Qualcomm ≫ Qcs610 Version -

Qualcomm ≫ Rennell Firmware Version -

Qualcomm ≫ Rennell Version -

Qualcomm ≫ Sa415m Firmware Version -

Qualcomm ≫ Sa415m Version -

Qualcomm ≫ Sa6155p Firmware Version -

Qualcomm ≫ Sa6155p Version -

Qualcomm ≫ Sc7180 Firmware Version -

Qualcomm ≫ Sc7180 Version -

Qualcomm ≫ Sda660 Firmware Version -

Qualcomm ≫ Sda660 Version -

Qualcomm ≫ Sda845 Firmware Version -

Qualcomm ≫ Sda845 Version -

Qualcomm ≫ Sdm630 Firmware Version -

Qualcomm ≫ Sdm630 Version -

Qualcomm ≫ Sdm636 Firmware Version -

Qualcomm ≫ Sdm636 Version -

Qualcomm ≫ Sdm660 Firmware Version -

Qualcomm ≫ Sdm660 Version -

Qualcomm ≫ Sdm670 Firmware Version -

Qualcomm ≫ Sdm670 Version -

Qualcomm ≫ Sdm710 Firmware Version -

Qualcomm ≫ Sdm710 Version -

Qualcomm ≫ Sdm845 Firmware Version -

Qualcomm ≫ Sdm845 Version -

Qualcomm ≫ Sdm850 Firmware Version -

Qualcomm ≫ Sdm850 Version -

Qualcomm ≫ Sdx24 Firmware Version -

Qualcomm ≫ Sdx24 Version -

Qualcomm ≫ Sdx55 Firmware Version -

Qualcomm ≫ Sdx55 Version -

Qualcomm ≫ Sm6150 Firmware Version -

Qualcomm ≫ Sm6150 Version -

Qualcomm ≫ Sm7150 Firmware Version -

Qualcomm ≫ Sm7150 Version -

Qualcomm ≫ Sm8150 Firmware Version -

Qualcomm ≫ Sm8150 Version -

Qualcomm ≫ Sm8250 Firmware Version -

Qualcomm ≫ Sm8250 Version -

Qualcomm ≫ Sxr1130 Firmware Version -

Qualcomm ≫ Sxr1130 Version -

Qualcomm ≫ Sxr2130 Firmware Version -

Qualcomm ≫ Sxr2130 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.16%	0.053

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin

Broken Link

https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-10562

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-10562

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-10562

EUVD