1. CVE-Search
  2. CVE-2020-11209
ID CVE-2020-11209
Summary Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
References
Vulnerable Configurations
  • cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sd821_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd821_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd821:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd821:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:qcs603:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:qcs603:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sda855_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sda855_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sda855:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sda855:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sa6155:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sa6155:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd855:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd855:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sd429_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd429_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd429:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd429:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sd439_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sd439_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd439:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sd439:-:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 22-12-2021 - 20:39)
Impact:
Exploitability:
CWE CWE-863
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:P/A:N
refmap via4
confirm https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
Last major update 22-12-2021 - 20:39
Published 12-11-2020 - 10:15
Last modified 22-12-2021 - 20:39
Back to Top