Evil-DB LogoEvil-DB
← All CVEs

CVE-2020-11301

critical · 9.1

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

9.1
CVSS
11.1%
EPSS (exploit prob.)
96th
EPSS percentile
2021-09-08
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-287

Affected products

VendorProductAffected versions
qualcommapq8009_firmwareall versions
qualcommapq8009all versions
qualcommapq8009_firmwareall versions
qualcommapq8009all versions
qualcommapq8017_firmwareall versions
qualcommapq8017all versions
qualcommapq8053_firmwareall versions
qualcommapq8053all versions
qualcommapq8064au_firmwareall versions
qualcommapq8064auall versions
qualcommapq8096au_firmwareall versions
qualcommapq8096auall versions
qualcommaqt1000_firmwareall versions
qualcommaqt1000all versions
qualcommar7420_firmwareall versions
qualcommar7420all versions
qualcommar8031_firmwareall versions
qualcommar8031all versions
qualcommar8035_firmwareall versions
qualcommar8035all versions
qualcommar9380_firmwareall versions
qualcommar9380all versions
qualcommcsr6030_firmwareall versions
qualcommcsr6030all versions
qualcommcsr8811_firmwareall versions
qualcommcsr8811all versions
qualcommcsra6620_firmwareall versions
qualcommcsra6620all versions
qualcommcsra6640_firmwareall versions
qualcommcsra6640all versions
qualcommcsrb31024_firmwareall versions
qualcommcsrb31024all versions
qualcommipq4018_firmwareall versions
qualcommipq4018all versions
qualcommipq4019_firmwareall versions
qualcommipq4019all versions
qualcommipq4028_firmwareall versions
qualcommipq4028all versions
qualcommipq4029_firmwareall versions
qualcommipq4029all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-11301