var-201904-0543
Vulnerability from variot
Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130. plural Snapdragon The product contains an information disclosure vulnerability.Information may be obtained. QualcommMDM9607 and others are a central processing unit (CPU) product of Qualcomm. There are information disclosure vulnerabilities in TrustZone in several Qualcomm products. An attacker could exploit the vulnerability to disclose information. The following products are affected: Qualcomm MDM9206; MDM9607; MDM9650; MDM9655; QCS605; SD 410/12; SD 615/16; SD 415; SD 636; SD 712; SD 710; SDA660; SDM630; SDM660; SXR1130
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201904-0543", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "mdm9206", "scope": null, "trust": 1.4, "vendor": "qualcomm", "version": null }, { "model": "mdm9607", "scope": null, "trust": 1.4, "vendor": "qualcomm", "version": null }, { "model": "mdm9650", "scope": null, "trust": 1.4, "vendor": "qualcomm", "version": null }, { "model": "mdm9655", "scope": null, "trust": 1.4, "vendor": "qualcomm", "version": null }, { "model": "qcs605", "scope": null, "trust": 1.4, "vendor": "qualcomm", "version": null }, { "model": "sd 8cx", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 410", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 415", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "qcs605", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sda660", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 710", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9607", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9650", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 850", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9206", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 615", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sdm630", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 845", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sdm660", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "mdm9655", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 616", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 670", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sxr1130", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 412", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 712", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 636", "scope": "eq", "trust": 1.0, "vendor": "qualcomm", "version": null }, { "model": "sd 410", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 412", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 415", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 615", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd 616", "scope": null, "trust": 0.8, "vendor": "qualcomm", "version": null }, { "model": "sd", "scope": "eq", "trust": 0.6, "vendor": "qualcomm", "version": "850" }, { "model": "sd", "scope": "eq", "trust": 0.6, "vendor": "qualcomm", "version": "615/16" }, { "model": "sd", "scope": "eq", "trust": 0.6, "vendor": "qualcomm", "version": "415" }, { "model": "sd", "scope": "eq", "trust": 0.6, "vendor": "qualcomm", "version": "410/12" }, { "model": "sdm630", "scope": null, "trust": 0.6, "vendor": "qualcomm", "version": null }, { "model": "sdm660", "scope": null, "trust": 0.6, "vendor": "qualcomm", "version": null }, { "model": "sd", "scope": "eq", "trust": 0.6, "vendor": "qualcomm", "version": "845" }, { "model": "sda660", "scope": null, "trust": 0.6, "vendor": "qualcomm", "version": null }, { "model": "sxr1130", "scope": null, "trust": 0.6, "vendor": "qualcomm", "version": null }, { "model": "sd 8cx", "scope": null, "trust": 0.6, "vendor": "qualcomm", "version": null }, { "model": "sd", "scope": "eq", "trust": 0.6, "vendor": "qualcomm", "version": "636" }, { "model": "sd", "scope": "eq", "trust": 0.6, "vendor": "qualcomm", "version": "712" }, { "model": "sd", "scope": "eq", "trust": 0.6, "vendor": "qualcomm", "version": "710" }, { "model": "sd", "scope": "eq", "trust": 0.6, "vendor": "qualcomm", "version": "670" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2019-08980" }, { "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "db": "NVD", "id": "CVE-2018-11971" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/o:qualcomm:mdm9206_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:mdm9607_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:mdm9650_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:mdm9655_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:qcs605_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_410_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_412_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_415_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_615_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:qualcomm:sd_616_firmware", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-015200" } ] }, "cve": "CVE-2018-11971", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 3.9, "id": "CVE-2018-11971", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 1.9, "vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "id": "CNVD-2019-08980", "impactScore": 2.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 3.9, "id": "VHN-121884", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:L/AC:L/AU:N/C:C/I:N/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "LOCAL", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "exploitabilityScore": 1.8, "id": "CVE-2018-11971", "impactScore": 3.6, "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "trust": 1.8, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2018-11971", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2018-11971", "trust": 0.8, "value": "Medium" }, { "author": "CNVD", "id": "CNVD-2019-08980", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-201903-129", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-121884", "trust": 0.1, "value": "MEDIUM" }, { "author": "VULMON", "id": "CVE-2018-11971", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2019-08980" }, { "db": "VULHUB", "id": "VHN-121884" }, { "db": "VULMON", "id": "CVE-2018-11971" }, { "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "db": "CNNVD", "id": "CNNVD-201903-129" }, { "db": "NVD", "id": "CVE-2018-11971" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130. plural Snapdragon The product contains an information disclosure vulnerability.Information may be obtained. QualcommMDM9607 and others are a central processing unit (CPU) product of Qualcomm. There are information disclosure vulnerabilities in TrustZone in several Qualcomm products. An attacker could exploit the vulnerability to disclose information. The following products are affected: Qualcomm MDM9206; MDM9607; MDM9650; MDM9655; QCS605; SD 410/12; SD 615/16; SD 415; SD 636; SD 712; SD 710; SDA660; SDM630; SDM660; SXR1130", "sources": [ { "db": "NVD", "id": "CVE-2018-11971" }, { "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "db": "CNVD", "id": "CNVD-2019-08980" }, { "db": "VULHUB", "id": "VHN-121884" }, { "db": "VULMON", "id": "CVE-2018-11971" } ], "trust": 2.34 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2018-11971", "trust": 3.2 }, { "db": "JVNDB", "id": "JVNDB-2018-015200", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201903-129", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2019-08980", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-121884", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2018-11971", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2019-08980" }, { "db": "VULHUB", "id": "VHN-121884" }, { "db": "VULMON", "id": "CVE-2018-11971" }, { "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "db": "CNNVD", "id": "CNNVD-201903-129" }, { "db": "NVD", "id": "CVE-2018-11971" } ] }, "id": "VAR-201904-0543", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2019-08980" }, { "db": "VULHUB", "id": "VHN-121884" } ], "trust": 1.7 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2019-08980" } ] }, "last_update_date": "2024-11-23T22:17:05.596000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "March 2019 Qualcomm Technologies, Inc. Security Bulletin", "trust": 0.8, "url": "https://www.qualcomm.com/company/product-security/bulletins" }, { "title": "Patches for multiple Qualcomm Product Information Disclosure Vulnerabilities (CNVD-2019-08980)", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchInfo/show/158075" }, { "title": "Multiple Qualcomm Product information disclosure vulnerability repair measures", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=89799" }, { "title": "Android Security Bulletins: Android Security Bulletin \u2014 March 2019", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=android_security_bulletins\u0026qid=e9cddeba5732c8294d7cd6c4b6f1170b" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2019-08980" }, { "db": "VULMON", "id": "CVE-2018-11971" }, { "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "db": "CNNVD", "id": "CNNVD-201903-129" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-200", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-121884" }, { "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "db": "NVD", "id": "CVE-2018-11971" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.8, "url": "https://www.qualcomm.com/company/product-security/bulletins" }, { "trust": 1.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-11971" }, { "trust": 1.2, "url": "https://vigilance.fr/vulnerability/google-android-pixel-multiple-vulnerabilities-of-march-2019-28664" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-11971" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/200.html" }, { "trust": 0.1, "url": "https://nvd.nist.gov" }, { "trust": 0.1, "url": "https://source.android.com/security/bulletin/2019-03-01.html" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2019-08980" }, { "db": "VULHUB", "id": "VHN-121884" }, { "db": "VULMON", "id": "CVE-2018-11971" }, { "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "db": "CNNVD", "id": "CNNVD-201903-129" }, { "db": "NVD", "id": "CVE-2018-11971" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2019-08980" }, { "db": "VULHUB", "id": "VHN-121884" }, { "db": "VULMON", "id": "CVE-2018-11971" }, { "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "db": "CNNVD", "id": "CNNVD-201903-129" }, { "db": "NVD", "id": "CVE-2018-11971" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-04-03T00:00:00", "db": "CNVD", "id": "CNVD-2019-08980" }, { "date": "2019-04-04T00:00:00", "db": "VULHUB", "id": "VHN-121884" }, { "date": "2019-04-04T00:00:00", "db": "VULMON", "id": "CVE-2018-11971" }, { "date": "2019-05-13T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "date": "2019-03-05T00:00:00", "db": "CNNVD", "id": "CNNVD-201903-129" }, { "date": "2019-04-04T15:29:00.767000", "db": "NVD", "id": "CVE-2018-11971" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-04-03T00:00:00", "db": "CNVD", "id": "CNVD-2019-08980" }, { "date": "2019-04-07T00:00:00", "db": "VULHUB", "id": "VHN-121884" }, { "date": "2019-04-07T00:00:00", "db": "VULMON", "id": "CVE-2018-11971" }, { "date": "2019-05-13T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-015200" }, { "date": "2019-04-09T00:00:00", "db": "CNNVD", "id": "CNNVD-201903-129" }, { "date": "2024-11-21T03:44:21.307000", "db": "NVD", "id": "CVE-2018-11971" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "local", "sources": [ { "db": "CNNVD", "id": "CNNVD-201903-129" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "plural Snapdragon Information disclosure vulnerability in products", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-015200" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "information disclosure", "sources": [ { "db": "CNNVD", "id": "CNNVD-201903-129" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.