10
CVE-2020-3657
- EPSS 28.34%
- Veröffentlicht 02.11.2020 07:15:14
- Zuletzt bearbeitet 21.11.2024 05:31:30
- Erkennungen
Loginu'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8009 Firmware Version -
Qualcomm ≫ Apq8017 Firmware Version -
Qualcomm ≫ Apq8053 Firmware Version -
Qualcomm ≫ Apq8096au Firmware Version -
Qualcomm ≫ Apq8098 Firmware Version -
Qualcomm ≫ Ipq4019 Firmware Version -
Qualcomm ≫ Ipq6018 Firmware Version -
Qualcomm ≫ Ipq8064 Firmware Version -
Qualcomm ≫ Ipq8074 Firmware Version -
Qualcomm ≫ Mdm9150 Firmware Version -
Qualcomm ≫ Mdm9206 Firmware Version -
Qualcomm ≫ Mdm9207c Firmware Version -
Qualcomm ≫ Mdm9607 Firmware Version -
Qualcomm ≫ Mdm9640 Firmware Version -
Qualcomm ≫ Mdm9650 Firmware Version -
Qualcomm ≫ Msm8905 Firmware Version -
Qualcomm ≫ Msm8909w Firmware Version -
Qualcomm ≫ Msm8953 Firmware Version -
Qualcomm ≫ Msm8996au Firmware Version -
Qualcomm ≫ Qca6574au Firmware Version -
Qualcomm ≫ Qcs405 Firmware Version -
Qualcomm ≫ Qcs610 Firmware Version -
Qualcomm ≫ Qrb5165 Firmware Version -
Qualcomm ≫ Sc8180x Firmware Version -
Qualcomm ≫ Sda660 Firmware Version -
Qualcomm ≫ Sda845 Firmware Version -
Qualcomm ≫ Sdm429 Firmware Version -
Qualcomm ≫ Sdm429w Firmware Version -
Qualcomm ≫ Sdm630 Firmware Version -
Qualcomm ≫ Sdm632 Firmware Version -
Qualcomm ≫ Sdm636 Firmware Version -
Qualcomm ≫ Sdm660 Firmware Version -
Qualcomm ≫ Sdm845 Firmware Version -
Qualcomm ≫ Sdx20 Firmware Version -
Qualcomm ≫ Sdx24 Firmware Version -
Qualcomm ≫ Sdx55 Firmware Version -
Qualcomm ≫ Sm8250 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 28.34% | 0.979 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin