CVE-2020-3615

Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to improper enum values used to check the frame subtype in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8009, APQ8053, APQ8096AU, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SC8180X, SDM630, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8150, SXR1130
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
qualcommapq8009_firmware
-
qualcommapq8053_firmware
-
qualcommapq8096au_firmware
-
qualcommmdm9150_firmware
-
qualcommmdm9206_firmware
-
qualcommmdm9207c_firmware
-
qualcommmdm9607_firmware
-
qualcommmdm9650_firmware
-
qualcommmsm8996au_firmware
-
qualcommqca6174a_firmware
-
qualcommqca6574au_firmware
-
qualcommqca9377_firmware
-
qualcommqca9379_firmware
-
qualcommqcn7605_firmware
-
qualcommqcs605_firmware
-
qualcommsc8180x_firmware
-
qualcommsdm630_firmware
-
qualcommsdm636_firmware
-
qualcommsdm660_firmware
-
qualcommsdm845_firmware
-
qualcommsdx20_firmware
-
qualcommsdx24_firmware
-
qualcommsdx55_firmware
-
qualcommsm8150_firmware
-
qualcommsxr1130_firmware
-
𝑥
= Vulnerable software versions