CVEvulnerability

CVE-2020-11117

9.8 CRITICAL Published 2020-09-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-77

Description

u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980

Affected configurations

• qualcomm ipq4019 firmware • qualcomm ipq6018 firmware • qualcomm ipq8064 firmware • qualcomm ipq8074 firmware • qualcomm qca4531 firmware • qualcomm qca9531 firmware • qualcomm qca9980 firmware

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References