9.8

CVE-2020-11117

Exploit
u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ipq4019 Firmware Version -
   Qualcomm ≫ Ipq4019 Version -
Qualcomm ≫ Ipq6018 Firmware Version -
   Qualcomm ≫ Ipq6018 Version -
Qualcomm ≫ Ipq8064 Firmware Version -
   Qualcomm ≫ Ipq8064 Version -
Qualcomm ≫ Ipq8074 Firmware Version -
   Qualcomm ≫ Ipq8074 Version -
Qualcomm ≫ Qca4531 Firmware Version -
   Qualcomm ≫ Qca4531 Version -
Qualcomm ≫ Qca9531 Firmware Version -
   Qualcomm ≫ Qca9531 Version -
Qualcomm ≫ Qca9980 Firmware Version -
   Qualcomm ≫ Qca9980 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 20.08% 0.971
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
Broken Link
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1065
Third Party Advisory
Exploit