Vulnetix
Try Vulnetix Request Demo
CVE-2020-3657 PUBLISHED CVSS 9.800000190734863 CRITICAL

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250

EPSS 15.55% · 94.6th percentile

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
15.55%
94.6th percentile

Affected Products

VendorProductVersions
qualcommmdm9640_firmware
qualcommmsm8909w_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingAPQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250
qualcommmdm9206_firmware
qualcommapq8096au_firmware
qualcommipq8074_firmware
qualcommipq4019_firmware
qualcommsm8250_firmware
qualcommapq8098_firmware
qualcommipq8064_firmware
qualcommapq8053_firmware
qualcommmsm8953_firmware
qualcommsdx55_firmware
qualcommsda845_firmware
qualcommsdm636_firmware
qualcommmdm9150_firmware
qualcommsdm429w_firmware
qualcommqrb5165_firmware
qualcommsda660_firmware
qualcommapq8009_firmware

…and 18 more

Timeline

References

Open in Interactive Console →