peter bassill · operator
$ cve CVE-2020-11117 JSON

CVE-2020-11117

9.8
CRITICAL · CVSS 3.1 · EPSS 19.7% (pctl 97)

Patch early

EPSS 19.7% — above the 10% action threshold.

Description

u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS19.68% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-77
On CISA KEVno
Public exploitnone known
Published2020-09-08
Last modified2026-06-17

Affected (14)

VendorProduct
qualcommipq4019
qualcommipq4019 firmware
qualcommipq6018
qualcommipq6018 firmware
qualcommipq8064
qualcommipq8064 firmware
qualcommipq8074
qualcommipq8074 firmware
qualcommqca4531
qualcommqca4531 firmware
qualcommqca9531
qualcommqca9531 firmware
qualcommqca9980
qualcommqca9980 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD