Lucene search

QualcommCVE-2020-3628

HistoryJun 22, 2020 - 7:15 a.m.

CVE-2020-3628

2020-06-2207:15:12

qualcomm

web.nvd.nist.gov

cve-2020-3628

improper access

socket

logging application

snapdragon consumer iot

snapdragon mobile

apq8053

rennell

sdx20

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

56.4%

JSON

Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, Rennell, SDX20

Affected configurations

Nvd

Node

qualcommapq8053_firmwareMatch-

AND

qualcommapq8053Match-

Node

qualcommrennell_firmwareMatch-

AND

qualcommrennellMatch-

Node

qualcommsdx20_firmwareMatch-

AND

qualcommsdx20Match-

VendorProductVersionCPE
qualcommapq8053_firmware-cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
qualcommapq8053-cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*
qualcommrennell_firmware-cpe:2.3:o:qualcomm:rennell_firmware:-:*:*:*:*:*:*:*
qualcommrennell-cpe:2.3:h:qualcomm:rennell:-:*:*:*:*:*:*:*
qualcommsdx20_firmware-cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*
qualcommsdx20-cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	apq8053_firmware	-	cpe:2.3:o:qualcomm:apq8053_firmware:-:::::::*
qualcomm	apq8053	-	cpe:2.3:h:qualcomm:apq8053:-:::::::*
qualcomm	rennell_firmware	-	cpe:2.3:o:qualcomm:rennell_firmware:-:::::::*
qualcomm	rennell	-	cpe:2.3:h:qualcomm:rennell:-:::::::*
qualcomm	sdx20_firmware	-	cpe:2.3:o:qualcomm:sdx20_firmware:-:::::::*
qualcomm	sdx20	-	cpe:2.3:h:qualcomm:sdx20:-:::::::*

CNA Affected

[
  {
    "product": "Snapdragon Consumer IOT, Snapdragon Mobile",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8053, Rennell, SDX20"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin

www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

56.4%

JSON

Related for CVE-2020-3628