CVEvulnerability
CVE-2018-11888
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-862
Description
Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439, Snapdragon_High_Med_2016.
Affected configurations
• qualcomm mdm9607 firmware
• qualcomm mdm9650 firmware
• qualcomm mdm9655 firmware
• qualcomm msm8996au firmware
• qualcomm sd 210 firmware
• qualcomm sd 212 firmware
• qualcomm sd 205 firmware
• qualcomm sd 410 firmware
• qualcomm sd 412 firmware
• qualcomm sd 425 firmware
• qualcomm sd 427 firmware
• qualcomm sd 430 firmware
• qualcomm sd 435 firmware
• qualcomm sd 439 firmware
• qualcomm sd 429 firmware
• qualcomm sd 450 firmware
• qualcomm sd 615 firmware
• qualcomm sd 616 firmware
• qualcomm sd 415 firmware
• qualcomm sd 625 firmware
• qualcomm sd 632 firmware
• qualcomm sd 650 firmware
• qualcomm sd 652 firmware
• qualcomm sd 820 firmware
• qualcomm sd 820a firmware
• qualcomm sd 835 firmware
• qualcomm sd 8cx firmware
• qualcomm sdm439 firmware
• qualcomm snapdragon high med 2016 firmware
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- http://www.securityfocus.com/bid/106475 Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory
- http://www.securityfocus.com/bid/106475 Third Party Advisory
- https://www.qualcomm.com/company/product-security/bulletins Vendor Advisory