CVEvulnerability
CVE-2020-11264
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-09-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Affected configurations
• qualcomm apq8053 firmware
• qualcomm apq8064au firmware
• qualcomm apq8096au firmware
• qualcomm aqt1000 firmware
• qualcomm ar8031 firmware
• qualcomm ar8035 firmware
• qualcomm csra6620 firmware
• qualcomm csra6640 firmware
• qualcomm csrb31024 firmware
• qualcomm mdm9650 firmware
• qualcomm msm8953 firmware
• qualcomm msm8996au firmware
• qualcomm qca1062 firmware
• qualcomm qca1064 firmware
• qualcomm qca2062 firmware
• qualcomm qca2064 firmware
• qualcomm qca2065 firmware
• qualcomm qca2066 firmware
• qualcomm qca6164 firmware
• qualcomm qca6174 firmware
• qualcomm qca6174a firmware
• qualcomm qca6175a firmware
• qualcomm qca6390 firmware
• qualcomm qca6391 firmware
• qualcomm qca6420 firmware
• qualcomm qca6426 firmware
• qualcomm qca6430 firmware
• qualcomm qca6436 firmware
• qualcomm qca6564a firmware
• qualcomm qca6564au firmware
• qualcomm qca6574 firmware
• qualcomm qca6574a firmware
• qualcomm qca6574au firmware
• qualcomm qca6584au firmware
• qualcomm qca6595au firmware
• qualcomm qca6696 firmware
• qualcomm qca8337 firmware
• qualcomm qca9377 firmware
• qualcomm qcm2290 firmware
• qualcomm qcm4290 firmware
• qualcomm qcm6125 firmware
• qualcomm qcs2290 firmware
• qualcomm qcs405 firmware
• qualcomm qcs410 firmware
• qualcomm qcs4290 firmware
• qualcomm qcs603 firmware
• qualcomm qcs605 firmware
• qualcomm qcs610 firmware
• qualcomm qcs6125 firmware
• qualcomm qrb5165 firmware
• qualcomm sa415m firmware
• qualcomm sa6145p firmware
• qualcomm sa6150p firmware
• qualcomm sa6155p firmware
• qualcomm sa8145p firmware
• qualcomm sa8150p firmware
• qualcomm sa8155 firmware
• qualcomm sa8155p firmware
• qualcomm sa8195p firmware
• qualcomm sc8280xp firmware
… and 66 more
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin Patch, Vendor Advisory