VDB
CVE-2020-11157
CVE-2020-11157
PUBLISHED
CVSS 7.5 HIGH
u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8076, MDM9640, MDM9650, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, QCA6174A, QCA9886, QCM2150, QM215, SDM429, SDM439, SDM450, SDM632
EPSS 0.16% · 36.3th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.16%
36.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| qualcomm | mdm9650_firmware | |
| qualcomm | sdm439_firmware | |
| qualcomm | msm8953_firmware | |
| qualcomm | sdm450_firmware | |
| qualcomm | qcm2150_firmware | |
| qualcomm | mdm9640_firmware | |
| qualcomm | msm8940_firmware | |
| qualcomm | msm8917_firmware | |
| qualcomm | sdm632_firmware | |
| Qualcomm, Inc. | Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | APQ8053, APQ8076, MDM9640, MDM9650, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, QCA6174A, QCA9886, QCM2150, QM215, SDM429, SDM439, SDM450, SDM632 |
| qualcomm | msm8905_firmware | |
| qualcomm | apq8076_firmware | |
| qualcomm | msm8937_firmware | |
| qualcomm | qca9886_firmware | |
| qualcomm | sdm429_firmware | |
| qualcomm | qca6174a_firmware | |
| qualcomm | apq8053_firmware | |
| qualcomm | qm215_firmware |
Timeline
- Oct 6, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score