CVE-2018-11952 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.4 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qualcomm	CNA	7.8 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 2%

Vendor	Product	Version
qualcomm	mdm9206_firmware	-
qualcomm	mdm9607_firmware	-
qualcomm	mdm9640_firmware	-
qualcomm	mdm9650_firmware	-
qualcomm	msm8909w_firmware	-
qualcomm	sd_210_firmware	-
qualcomm	sd_212_firmware	-
qualcomm	sd_205_firmware	-
qualcomm	sd_425_firmware	-
qualcomm	sd_430_firmware	-
qualcomm	sd_450_firmware	-
qualcomm	sd_615_firmware	-
qualcomm	sd_616_firmware	-
qualcomm	sd_415_firmware	-
qualcomm	sd_617_firmware	-
qualcomm	sd_625_firmware	-
qualcomm	sd_650_firmware	-
qualcomm	sd_652_firmware	-
qualcomm	sd_810_firmware	-
qualcomm	sd_820_firmware	-
qualcomm	sd_820a_firmware	-
qualcomm	sd_835_firmware	-
qualcomm	sd_845_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-287 - Improper Authentication
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html