7.8
CVE-2019-14089
- EPSS 0.16%
- Veröffentlicht 08.09.2020 10:15:12
- Zuletzt bearbeitet 21.11.2024 04:26:04
- Erkennungen
Loginu'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-provisioned after a user data erase or a factory reset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, Nicobar, QCS404, QCS610, Rennell, SA515M, SA6155P, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Kamorta Firmware Version -
Qualcomm ≫ Nicobar Firmware Version -
Qualcomm ≫ Qcs404 Firmware Version -
Qualcomm ≫ Qcs610 Firmware Version -
Qualcomm ≫ Rennell Firmware Version -
Qualcomm ≫ Sa515m Firmware Version -
Qualcomm ≫ Sa6155p Firmware Version -
Qualcomm ≫ Sc7180 Firmware Version -
Qualcomm ≫ Sc8180x Firmware Version -
Qualcomm ≫ Sdx55 Firmware Version -
Qualcomm ≫ Sm6150 Firmware Version -
Qualcomm ≫ Sm7150 Firmware Version -
Qualcomm ≫ Sm8150 Firmware Version -
Qualcomm ≫ Sm8250 Firmware Version -
Qualcomm ≫ Sxr2130 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.055 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin