Vulnetix
Try Vulnetix Request Demo
CVE-2020-3615 PUBLISHED CVSS 9.800000190734863 CRITICAL

Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to improper enum values used to check the frame subtype in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8009, APQ8053, APQ8096AU, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SC8180X, SDM630, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8150, SXR1130

EPSS 0.34% · 56.3th percentile

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.34%
56.3th percentile

Affected Products

VendorProductVersions
qualcommqca9377_firmware
qualcommqcs605_firmware
qualcommsdm630_firmware
qualcommqca6574au_firmware
qualcommqca9379_firmware
qualcommqca6174a_firmware
qualcommapq8009_firmware
qualcommsdx20_firmware
qualcommsc8180x_firmware
qualcommmdm9206_firmware
qualcommmdm9207c_firmware
qualcommsdm636_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MobileAPQ8009, APQ8053, APQ8096AU, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SC8180X, SDM630, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8150, SXR1130
qualcommsdm660_firmware
qualcommmsm8996au_firmware
qualcommmdm9607_firmware
qualcommsxr1130_firmware
qualcommsdm845_firmware
qualcommapq8053_firmware
qualcommsm8150_firmware

…and 6 more

Timeline

References

Open in Interactive Console →