CVE-2020-11264
critical · 9.1Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
9.1
CVSS
13.2%
EPSS (exploit prob.)
96th
EPSS percentile
2021-09-08
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-287
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| qualcomm | apq8053_firmware | all versions |
| qualcomm | apq8053 | all versions |
| qualcomm | apq8064au_firmware | all versions |
| qualcomm | apq8064au | all versions |
| qualcomm | apq8096au_firmware | all versions |
| qualcomm | apq8096au | all versions |
| qualcomm | aqt1000_firmware | all versions |
| qualcomm | aqt1000 | all versions |
| qualcomm | ar8031_firmware | all versions |
| qualcomm | ar8031 | all versions |
| qualcomm | ar8035_firmware | all versions |
| qualcomm | ar8035 | all versions |
| qualcomm | csra6620_firmware | all versions |
| qualcomm | csra6620 | all versions |
| qualcomm | csra6640_firmware | all versions |
| qualcomm | csra6640 | all versions |
| qualcomm | csrb31024_firmware | all versions |
| qualcomm | csrb31024 | all versions |
| qualcomm | mdm9650_firmware | all versions |
| qualcomm | mdm9650 | all versions |
| qualcomm | msm8953_firmware | all versions |
| qualcomm | msm8953 | all versions |
| qualcomm | msm8996au_firmware | all versions |
| qualcomm | msm8996au | all versions |
| qualcomm | qca1062_firmware | all versions |
| qualcomm | qca1062 | all versions |
| qualcomm | qca1064_firmware | all versions |
| qualcomm | qca1064 | all versions |
| qualcomm | qca2062_firmware | all versions |
| qualcomm | qca2062 | all versions |
| qualcomm | qca2064_firmware | all versions |
| qualcomm | qca2064 | all versions |
| qualcomm | qca2065_firmware | all versions |
| qualcomm | qca2065 | all versions |
| qualcomm | qca2066_firmware | all versions |
| qualcomm | qca2066 | all versions |
| qualcomm | qca6164_firmware | all versions |
| qualcomm | qca6164 | all versions |
| qualcomm | qca6174_firmware | all versions |
| qualcomm | qca6174 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2020-11264