ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-11264

—
CVSS 3.1
9.8 critical
EPSS
13%p96
Published
()
Modified
Description

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Vendors
qualcomm
Products
apq8053 firmware, apq8064au firmware, apq8096au firmware, aqt1000 firmware, ar8031 firmware, ar8035 firmware, csra6620 firmware, csra6640 firmware, csrb31024 firmware, mdm9650 firmware, msm8953 firmware, msm8996au firmware
Weakness
CWE-287
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (13.2%)

In the news

No ingested article mentions this CVE yet.