peter bassill · operator
$ cve CVE-2020-11301 JSON

CVE-2020-11301

9.1
CRITICAL · CVSS 3.1 · EPSS 11.1% (pctl 96)

Patch early

EPSS 11.1% — above the 10% action threshold.

Description

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Scoring

CVSS9.1 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS11.11% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-287
On CISA KEVno
Public exploitnone known
Published2021-09-08
Last modified2026-06-17

Affected (40)

VendorProduct
qualcommapq8009
qualcommapq8009 firmware
qualcommapq8017
qualcommapq8017 firmware
qualcommapq8053
qualcommapq8053 firmware
qualcommapq8064au
qualcommapq8064au firmware
qualcommapq8096au
qualcommapq8096au firmware
qualcommaqt1000
qualcommaqt1000 firmware
qualcommar7420
qualcommar7420 firmware
qualcommar8031
qualcommar8031 firmware
qualcommar8035
qualcommar8035 firmware
qualcommar9380
qualcommar9380 firmware
qualcommcsr6030
qualcommcsr6030 firmware
qualcommcsr8811
qualcommcsr8811 firmware
qualcommcsra6620
qualcommcsra6620 firmware
qualcommcsra6640
qualcommcsra6640 firmware
qualcommcsrb31024
qualcommcsrb31024 firmware
qualcommipq4018
qualcommipq4018 firmware
qualcommipq4019
qualcommipq4019 firmware
qualcommipq4028
qualcommipq4028 firmware
qualcommipq4029
qualcommipq4029 firmware
qualcommipq5010
qualcommipq5010 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD