by Kastro
Paper/Archive/CVE-2020-3628

CVE-2020-3628

Qualcomm, Inc. Snapdragon Consumer IOT, Snapdragon Mobile — Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdrag…

EPSS 1.0%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 61.5.615 × 2012.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, Rennell, SDX20

Affected

ProductAffectedFixed inSource
Snapdragon Consumer IOT, Snapdragon MobileAPQ8053, Rennell, SDX20–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refqualcomm.com/company/product-security/bulletins/june-2020-bulletin