2 lines
11 KiB
JSON
2 lines
11 KiB
JSON
{"affected":[{"affectedData":[{"product":"Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","vendor":"Qualcomm, Inc.","versions":[{"status":"affected","version":"APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150"}]}],"source":"product-security@qualcomm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B052615D-857A-46D4-9098-1CBFA14687C6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*","matchCriteriaId":"19B59B60-A298-4A56-A45A-E34B7AAB43D7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"94CB547F-0078-47CD-B511-06DE96882D5A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*","matchCriteriaId":"AA679375-BB14-4B24-8AD9-B2BFBACE2FDB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7A1CC1C1-F2CA-4C43-B9E9-1288C3496C7B","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*","matchCriteriaId":"AC82552A-9E7C-4A13-B7A5-43CEA218675C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FE28A59C-7AA6-4B85-84E8-07852B96108E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*","matchCriteriaId":"5DEE828B-09A7-4AC1-8134-491A7C87C118","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8CA1E7B0-782B-4757-B118-802943798984","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*","matchCriteriaId":"95CB08EC-AE12-4A54-AA3C-998F01FC8763","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qca9531_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"E71452E6-551F-4E93-9951-2582C60BDFCE","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qca9531:-:*:*:*:*:*:*:*","matchCriteriaId":"6D69FB0E-FDFF-42B8-ADAD-797B7C91E979","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qcn5502_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D33E62D2-931E-465C-BC8E-71FB36CF6E36","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qcn5502:-:*:*:*:*:*:*:*","matchCriteriaId":"254F1AB0-C21A-41A6-9B9B-ED074A4C9EBD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"36F5A18B-8C9E-4A38-B994-E3E2696BB83D","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*","matchCriteriaId":"B703667D-DE09-40AF-BA44-E0E56252A790","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A0CE1B23-6FE3-41C4-B264-C7A9E8BDBEC1","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*","matchCriteriaId":"794BA13C-3C63-4695-AA45-676F85D904BE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8ABE492A-3755-4969-9DEB-4B85EBB84644","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*","matchCriteriaId":"E3D3787B-6ACC-4591-B041-01307ED66C36","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F63A748F-2236-4486-83F1-DE4BCBE5D56D","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*","matchCriteriaId":"184F3DFC-27E8-48AC-B46C-C589DBCBF030","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:arista:access_point:*:*:*:*:*:*:*:*","matchCriteriaId":"5B3CF23B-9C45-4B3F-B077-02CC699A1DC5","versionEndIncluding":"8.8.3-12","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:arista:av2:-:*:*:*:*:*:*:*","matchCriteriaId":"74E5E321-2714-46FF-8F3F-4958EE7B3A5E","vulnerable":false},{"criteria":"cpe:2.3:h:arista:c-75:-:*:*:*:*:*:*:*","matchCriteriaId":"8EE26D5A-486B-48F3-9C1C-4EE3FD8F0234","vulnerable":false},{"criteria":"cpe:2.3:h:arista:c75-e:-:*:*:*:*:*:*:*","matchCriteriaId":"2E2ACBF3-F2B2-414E-92AE-20E4E80636B5","vulnerable":false},{"criteria":"cpe:2.3:h:arista:o-90:-:*:*:*:*:*:*:*","matchCriteriaId":"41F9E4B2-63FC-4F53-9C12-7478B7B6AD48","vulnerable":false},{"criteria":"cpe:2.3:h:arista:o90e:-:*:*:*:*:*:*:*","matchCriteriaId":"4CBAB8F1-1F56-4695-8F86-9AA994C4A6C0","vulnerable":false},{"criteria":"cpe:2.3:h:arista:w-68:-:*:*:*:*:*:*:*","matchCriteriaId":"9F03BB48-C89A-41F6-99DE-12FF95DCD9F2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252","vulnerable":true},{"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150"},{"lang":"es","value":"Un tráfico específicamente sincronizado y diseñado puede causar errores internos en un dispositivo WLAN que conllevan a un cifrado inapropiado del Wi-Fi de capa 2 con la consiguiente posibilidad de divulgación de información sobre el aire para un conjunto discreto de tráfico en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking versiones APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150"}],"id":"CVE-2020-3702","lastModified":"2026-10-08T21:17:30.337","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"ADJACENT_NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":3.3,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":6.5,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2020-3702","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-08T20:59:39.642184Z","version":"2.0.3"}}]},"published":"2020-09-08T10:15:16.340","references":[{"source":"product-security@qualcomm.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html"},{"source":"product-security@qualcomm.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html"},{"source":"product-security@qualcomm.com","tags":["Third Party Advisory"],"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58"},{"source":"product-security@qualcomm.com","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2021/dsa-4978"},{"source":"product-security@qualcomm.com","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2021/dsa-4978"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin"}],"sourceIdentifier":"product-security@qualcomm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-319"}],"source":"nvd@nist.gov","type":"Primary"}]}
|