Critical severity · published Sep 8, 2020
CVE-2020-11117
u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in…
9.8
CVSS
19.7%
EPSS
No
On KEV
Description
u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)19.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IF
Ipq4019 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq6018 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq8064 Firmware · Qualcomm
All versions, or not specified · source: NVD
IF
Ipq8074 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca4531 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca9531 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca9980 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-11117
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-11117
Broken Link
https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
Exploit
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1065
More from Ipq4019 Firmware
7.8
CVE-2023-33063
Use After Free in DSP Services
9.8
CVE-2024-21473
Memory corruption while redirecting log file to any file location with any file name
9.8
CVE-2023-33083
Memory corruption in WLAN Host while processing RRM beacon on the AP
9.8
CVE-2023-33082
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE
9.8
CVE-2022-33279
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length