Evil-DB LogoEvil-DB
← All CVEs

CVE-2020-3657

critical · 9.8

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250

9.8
CVSS
28.3%
EPSS (exploit prob.)
98th
EPSS percentile
2020-11-02
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Affected products

VendorProductAffected versions
qualcommapq8009_firmwareall versions
qualcommapq8009all versions
qualcommapq8017_firmwareall versions
qualcommapq8017all versions
qualcommapq8053_firmwareall versions
qualcommapq8053all versions
qualcommapq8096au_firmwareall versions
qualcommapq8096auall versions
qualcommapq8098_firmwareall versions
qualcommapq8098all versions
qualcommipq4019_firmwareall versions
qualcommipq4019all versions
qualcommipq6018_firmwareall versions
qualcommipq6018all versions
qualcommipq8064_firmwareall versions
qualcommipq8064all versions
qualcommipq8074_firmwareall versions
qualcommipq8074all versions
qualcommmdm9150_firmwareall versions
qualcommmdm9150all versions
qualcommmdm9206_firmwareall versions
qualcommmdm9206all versions
qualcommmdm9207c_firmwareall versions
qualcommmdm9207call versions
qualcommmdm9607_firmwareall versions
qualcommmdm9607all versions
qualcommmdm9640_firmwareall versions
qualcommmdm9640all versions
qualcommmdm9650_firmwareall versions
qualcommmdm9650all versions
qualcommmsm8905_firmwareall versions
qualcommmsm8905all versions
qualcommmsm8909w_firmwareall versions
qualcommmsm8909wall versions
qualcommmsm8953_firmwareall versions
qualcommmsm8953all versions
qualcommmsm8996au_firmwareall versions
qualcommmsm8996auall versions
qualcommqca6574au_firmwareall versions
qualcommqca6574auall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-3657