CVE-2020-3657
Patch early
EPSS 28.3% — above the 10% action threshold.
Description
u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 28.34% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-120 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2020-11-02 |
| Last modified | 2026-06-17 |
Affected (40)
| Vendor | Product |
|---|---|
| qualcomm | apq8009 |
| qualcomm | apq8009 firmware |
| qualcomm | apq8017 |
| qualcomm | apq8017 firmware |
| qualcomm | apq8053 |
| qualcomm | apq8053 firmware |
| qualcomm | apq8096au |
| qualcomm | apq8096au firmware |
| qualcomm | apq8098 |
| qualcomm | apq8098 firmware |
| qualcomm | ipq4019 |
| qualcomm | ipq4019 firmware |
| qualcomm | ipq6018 |
| qualcomm | ipq6018 firmware |
| qualcomm | ipq8064 |
| qualcomm | ipq8064 firmware |
| qualcomm | ipq8074 |
| qualcomm | ipq8074 firmware |
| qualcomm | mdm9150 |
| qualcomm | mdm9150 firmware |
| qualcomm | mdm9206 |
| qualcomm | mdm9206 firmware |
| qualcomm | mdm9207c |
| qualcomm | mdm9207c firmware |
| qualcomm | mdm9607 |
| qualcomm | mdm9607 firmware |
| qualcomm | mdm9640 |
| qualcomm | mdm9640 firmware |
| qualcomm | mdm9650 |
| qualcomm | mdm9650 firmware |
| qualcomm | msm8905 |
| qualcomm | msm8905 firmware |
| qualcomm | msm8909w |
| qualcomm | msm8909w firmware |
| qualcomm | msm8953 |
| qualcomm | msm8953 firmware |
| qualcomm | msm8996au |
| qualcomm | msm8996au firmware |
| qualcomm | qca6574au |
| qualcomm | qca6574au firmware |
References
→ the Explorer · watch your stack · NVD