CVE-2020-11157

u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8076, MDM9640, MDM9650, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, QCA6174A, QCA9886, QCM2150, QM215, SDM429, SDM439, SDM450, SDM632
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
qualcommCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
VendorProductVersion
qualcommapq8053_firmware
-
qualcommapq8076_firmware
-
qualcommmdm9640_firmware
-
qualcommmdm9650_firmware
-
qualcommmsm8905_firmware
-
qualcommmsm8917_firmware
-
qualcommmsm8937_firmware
-
qualcommmsm8940_firmware
-
qualcommmsm8953_firmware
-
qualcommqca6174a_firmware
-
qualcommqca9886_firmware
-
qualcommqcm2150_firmware
-
qualcommqm215_firmware
-
qualcommsdm429_firmware
-
qualcommsdm439_firmware
-
qualcommsdm450_firmware
-
qualcommsdm632_firmware
-
𝑥
= Vulnerable software versions
References
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin