7.8

CVE-2019-14002

EPSS 0.18%
Veröffentlicht 07.02.2020 05:15:11
Zuletzt bearbeitet 21.11.2024 04:25:52
Erkennungen
Login

APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6574AU, QCS605, QM215, SA6155P, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SM6150, SM8150, SM8250, SXR2130

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 29 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Apq8053 Firmware Version -

Qualcomm ≫ Apq8053 Version -

Qualcomm ≫ Apq8096au Firmware Version -

Qualcomm ≫ Apq8096au Version -

Qualcomm ≫ Apq8098 Firmware Version -

Qualcomm ≫ Apq8098 Version -

Qualcomm ≫ Msm8909w Firmware Version -

Qualcomm ≫ Msm8909w Version -

Qualcomm ≫ Msm8917 Firmware Version -

Qualcomm ≫ Msm8917 Version -

Qualcomm ≫ Msm8920 Firmware Version -

Qualcomm ≫ Msm8920 Version -

Qualcomm ≫ Msm8937 Firmware Version -

Qualcomm ≫ Msm8937 Version -

Qualcomm ≫ Msm8940 Firmware Version -

Qualcomm ≫ Msm8940 Version -

Qualcomm ≫ Msm8953 Firmware Version -

Qualcomm ≫ Msm8953 Version -

Qualcomm ≫ Msm8996au Firmware Version -

Qualcomm ≫ Msm8996au Version -

Qualcomm ≫ Nicobar Firmware Version -

Qualcomm ≫ Nicobar Version -

Qualcomm ≫ Qca6574au Firmware Version -

Qualcomm ≫ Qca6574au Version -

Qualcomm ≫ Qcs605 Firmware Version -

Qualcomm ≫ Qcs605 Version -

Qualcomm ≫ Qm215 Firmware Version -

Qualcomm ≫ Qm215 Version -

Qualcomm ≫ Sa6155p Firmware Version -

Qualcomm ≫ Sa6155p Version -

Qualcomm ≫ Sda660 Firmware Version -

Qualcomm ≫ Sda660 Version -

Qualcomm ≫ Sdm429 Firmware Version -

Qualcomm ≫ Sdm429 Version -

Qualcomm ≫ Sdm429w Firmware Version -

Qualcomm ≫ Sdm429w Version -

Qualcomm ≫ Sdm439 Firmware Version -

Qualcomm ≫ Sdm439 Version -

Qualcomm ≫ Sdm450 Firmware Version -

Qualcomm ≫ Sdm450 Version -

Qualcomm ≫ Sdm630 Firmware Version -

Qualcomm ≫ Sdm630 Version -

Qualcomm ≫ Sdm632 Firmware Version -

Qualcomm ≫ Sdm632 Version -

Qualcomm ≫ Sdm636 Firmware Version -

Qualcomm ≫ Sdm636 Version -

Qualcomm ≫ Sdm660 Firmware Version -

Qualcomm ≫ Sdm660 Version -

Qualcomm ≫ Sdm845 Firmware Version -

Qualcomm ≫ Sdm845 Version -

Qualcomm ≫ Sm6150 Firmware Version -

Qualcomm ≫ Sm6150 Version -

Qualcomm ≫ Sm8150 Firmware Version -

Qualcomm ≫ Sm8150 Version -

Qualcomm ≫ Sm8250 Firmware Version -

Qualcomm ≫ Sm8250 Version -

Qualcomm ≫ Sxr2130 Firmware Version -

Qualcomm ≫ Sxr2130 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.073

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-14002

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-14002

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-14002

EUVD