CVE-2018-11922

Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qualcommCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
VendorProductVersion
qualcommmdm9206_firmware
-
qualcommmdm9607_firmware
-
qualcommmdm9640_firmware
-
qualcommmdm9650_firmware
-
qualcomm215_firmware
-
qualcommsd_210_firmware
-
qualcommsd_212_firmware
-
qualcommsd_205_firmware
-
qualcommsd_425_firmware
-
qualcommsd_427_firmware
-
qualcommsd_430_firmware
-
qualcommsd_435_firmware
-
qualcommsd_439_firmware
-
qualcommsd_429_firmware
-
qualcommsd_450_firmware
-
qualcommsd_625_firmware
-
qualcommsd_632_firmware
-
qualcommsd_845_firmware
-
qualcommsd_850_firmware
-
qualcommsda660_firmware
-
qualcommsdm439_firmware
-
qualcommsdx20_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration