CVE-2018-12004

24.05.2019, 17:29

Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
qualcomm	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 13%

Vendor	Product	Version
qualcomm	mdm9206_firmware	-
qualcomm	mdm9607_firmware	-
qualcomm	mdm9650_firmware	-
qualcomm	mdm9655_firmware	-
qualcomm	qcs605_firmware	-
qualcomm	sd_210_firmware	-
qualcomm	sd_212_firmware	-
qualcomm	sd_205_firmware	-
qualcomm	sd_410_firmware	-
qualcomm	sd_412_firmware	-
qualcomm	sd_615_firmware	-
qualcomm	sd_616_firmware	-
qualcomm	sd_415_firmware	-
qualcomm	sd_636_firmware	-
qualcomm	sd_712_firmware	-
qualcomm	sd_710_firmware	-
qualcomm	sd_670_firmware	-
qualcomm	sd_835_firmware	-
qualcomm	sd_845_firmware	-
qualcomm	sd_850_firmware	-
qualcomm	sd_8cx_firmware	-
qualcomm	sda660_firmware	-
qualcomm	sdm630_firmware	-
qualcomm	sdm660_firmware	-
qualcomm	sxr1130_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References

https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-12004