CVE-2020-3628

EPSS 0.33%
Veröffentlicht 22.06.2020 07:15:12
Zuletzt bearbeitet 21.11.2024 05:31:26
Quelle product-security@qualcomm.com
Teams Watchlist Login
Unerledigt Login

Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, Rennell, SDX20

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Apq8053 Firmware Version-

Qualcomm ≫ Apq8053 Version-

Qualcomm ≫ Rennell Firmware Version-

Qualcomm ≫ Rennell Version-

Qualcomm ≫ Sdx20 Firmware Version-

Qualcomm ≫ Sdx20 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.33%	0.529

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin

Broken Link

https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-3628

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-3628

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-3628

EUVD