by Kastro
Paper/Archive/CVE-2020-11117

CVE-2020-11117

Qualcomm, Inc. Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking — u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content re…

EPSS 20%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.4.974 × 2019.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980

Affected

ProductAffectedFixed inSource
Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and NetworkingIPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refqualcomm.com/company/product-security/bulletins/august-2020-bulletinreftalosintelligence.com/vulnerability_reports/TALOS-2020-1065