fkie_cve-2020-11209
Vulnerability from fkie_nvd
Published
2020-11-12 10:15
Modified
2024-11-21 04:57
Severity ?
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Summary
Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
References
product-security@qualcomm.comhttps://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/Third Party Advisory
product-security@qualcomm.comhttps://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/Exploit, Third Party Advisory
product-security@qualcomm.comhttps://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletinBroken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletinBroken Link, Vendor Advisory
Impacted products
Vendor Product Version
qualcomm sd820_firmware -
qualcomm sd820 -
qualcomm sd821_firmware -
qualcomm sd821 -
qualcomm qcs603_firmware -
qualcomm qcs603 -
qualcomm qcs605_firmware -
qualcomm qcs605 -
qualcomm sda855_firmware -
qualcomm sda855 -
qualcomm sa6155p_firmware -
qualcomm sa6155p -
qualcomm sa6145p_firmware -
qualcomm sa6145p -
qualcomm sa6155_firmware -
qualcomm sa6155 -
qualcomm sa6155p_firmware -
qualcomm sa6155p -
qualcomm sd855_firmware -
qualcomm sd855 -
qualcomm sd_675_firmware -
qualcomm sd_675 -
qualcomm sd660_firmware -
qualcomm sd660 -
qualcomm sd429_firmware -
qualcomm sd429 -
qualcomm sd439_firmware -
qualcomm sd439 -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC508C49-0B76-43A8-B2AF-0F8EB989E238",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9665200-D306-4EEB-9F42-6C5963524179",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd821_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A54F4A3-19E3-4825-98C7-DA632D692A06",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd821:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "028CD81A-0D9D-40B0-9E2F-DC8689607B24",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EEFADBF-D751-499B-80E5-C1069E129F18",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:qcs603:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D327FBA1-69B5-467B-9B1B-A0380994D21B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B05FD66D-13A6-40E9-A64B-E428378F237E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0D665C1-3EBA-42F2-BF56-55E6C365F7DF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sda855_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BED2FB3-D8B5-456D-8A4F-91AB5624E722",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sda855:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FA79069-CF35-4274-B45C-EDD0827A8502",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0514D433-162C-4680-8912-721D19BE6201",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C66671C1-AE1A-44BE-9DB2-0B09FF4417DB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "74AA3929-3F80-4D54-B13A-9B070D5C03BB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C40544E-B040-491C-8DF3-50225E70B50C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sa6155:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2DAC85C-CDC9-4784-A69A-147A2CE8A8B2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0514D433-162C-4680-8912-721D19BE6201",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "42B30014-95AB-4F24-A7A5-60A907502609",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd855:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F562ED3D-CBE3-4DCC-BFBB-DE0AD2425A9C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F900C8F-9763-441A-B97E-E5394A68A08A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "589C1001-E9F6-41A6-BCC8-A94A3C97F2E6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3991C516-4FBE-43D8-835F-413FE45BF73E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9CF5EBB-B25A-4A76-B522-951F108263CC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd429_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D32539EB-9822-4864-8ECA-E9F9FB86CD25",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd429:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3945686E-666C-4A47-A062-608AD8C6F112",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd439_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA59D839-40A1-4520-83E7-94BB90E07C82",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd439:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "589BF3A7-70F0-4C52-B4FE-36CE6192A0C3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439"
    },
    {
      "lang": "es",
      "value": "Una autorizaci\u00f3n inapropiada en el proceso DSP podr\u00eda permitir a los usuarios no autorizados degradar las versiones de la biblioteca en versiones SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439"
    }
  ],
  "id": "CVE-2020-11209",
  "lastModified": "2024-11-21T04:57:16.010",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-11-12T10:15:13.250",
  "references": [
    {
      "source": "product-security@qualcomm.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/"
    },
    {
      "source": "product-security@qualcomm.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/"
    },
    {
      "source": "product-security@qualcomm.com",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "url": "https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "url": "https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin"
    }
  ],
  "sourceIdentifier": "product-security@qualcomm.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.