CVE-2020-3651 PUBLISHED CVSS 7.5 HIGH

Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS605, QM215, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8150, SXR1130

EPSS 0.25% · 47.6th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.25%
47.6th percentile

Affected Products

VendorProductVersions
qualcommsm8150_firmware
qualcommsdm450_firmware
qualcommmsm8953_firmware
qualcommsdm439_firmware
qualcommmdm9206_firmware
qualcommmsm8917_firmware
qualcommmsm8905_firmware
qualcommmdm9207c_firmware
qualcommsdm429_firmware
qualcommsdm429w_firmware
qualcommqcn7605_firmware
qualcommsdm660_firmware
qualcommsdm845_firmware
qualcommapq8017_firmware
qualcommmdm9650_firmware
qualcommapq8053_firmware
qualcommmsm8940_firmware
qualcommmsm8937_firmware
qualcommmsm8909w_firmware
qualcommqcm2150_firmware

…and 21 more

Timeline

References

Open in Interactive Console →