FKIE_CVE-2020-11209

Vulnerability from fkie_nvd - Published: 2020-11-12 10:15 - Updated: 2024-11-21 04:57
Severity ?
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Summary
Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
References
product-security@qualcomm.comhttps://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/Third Party Advisory
product-security@qualcomm.comhttps://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/Exploit, Third Party Advisory
product-security@qualcomm.comhttps://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletinBroken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletinBroken Link, Vendor Advisory
Impacted products
Vendor Product Version
qualcomm sd820_firmware -
qualcomm sd820 -
qualcomm sd821_firmware -
qualcomm sd821 -
qualcomm qcs603_firmware -
qualcomm qcs603 -
qualcomm qcs605_firmware -
qualcomm qcs605 -
qualcomm sda855_firmware -
qualcomm sda855 -
qualcomm sa6155p_firmware -
qualcomm sa6155p -
qualcomm sa6145p_firmware -
qualcomm sa6145p -
qualcomm sa6155_firmware -
qualcomm sa6155 -
qualcomm sa6155p_firmware -
qualcomm sa6155p -
qualcomm sd855_firmware -
qualcomm sd855 -
qualcomm sd_675_firmware -
qualcomm sd_675 -
qualcomm sd660_firmware -
qualcomm sd660 -
qualcomm sd429_firmware -
qualcomm sd429 -
qualcomm sd439_firmware -
qualcomm sd439 -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC508C49-0B76-43A8-B2AF-0F8EB989E238",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9665200-D306-4EEB-9F42-6C5963524179",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd821_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A54F4A3-19E3-4825-98C7-DA632D692A06",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd821:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "028CD81A-0D9D-40B0-9E2F-DC8689607B24",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EEFADBF-D751-499B-80E5-C1069E129F18",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:qcs603:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D327FBA1-69B5-467B-9B1B-A0380994D21B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B05FD66D-13A6-40E9-A64B-E428378F237E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0D665C1-3EBA-42F2-BF56-55E6C365F7DF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sda855_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BED2FB3-D8B5-456D-8A4F-91AB5624E722",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sda855:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FA79069-CF35-4274-B45C-EDD0827A8502",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0514D433-162C-4680-8912-721D19BE6201",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C66671C1-AE1A-44BE-9DB2-0B09FF4417DB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "74AA3929-3F80-4D54-B13A-9B070D5C03BB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C40544E-B040-491C-8DF3-50225E70B50C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sa6155:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2DAC85C-CDC9-4784-A69A-147A2CE8A8B2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0514D433-162C-4680-8912-721D19BE6201",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "42B30014-95AB-4F24-A7A5-60A907502609",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd855:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F562ED3D-CBE3-4DCC-BFBB-DE0AD2425A9C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F900C8F-9763-441A-B97E-E5394A68A08A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "589C1001-E9F6-41A6-BCC8-A94A3C97F2E6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3991C516-4FBE-43D8-835F-413FE45BF73E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9CF5EBB-B25A-4A76-B522-951F108263CC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd429_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D32539EB-9822-4864-8ECA-E9F9FB86CD25",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd429:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3945686E-666C-4A47-A062-608AD8C6F112",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qualcomm:sd439_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA59D839-40A1-4520-83E7-94BB90E07C82",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:sd439:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "589BF3A7-70F0-4C52-B4FE-36CE6192A0C3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439"
    },
    {
      "lang": "es",
      "value": "Una autorizaci\u00f3n inapropiada en el proceso DSP podr\u00eda permitir a los usuarios no autorizados degradar las versiones de la biblioteca en versiones SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439"
    }
  ],
  "id": "CVE-2020-11209",
  "lastModified": "2024-11-21T04:57:16.010",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-11-12T10:15:13.250",
  "references": [
    {
      "source": "product-security@qualcomm.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/"
    },
    {
      "source": "product-security@qualcomm.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/"
    },
    {
      "source": "product-security@qualcomm.com",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "url": "https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "url": "https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin"
    }
  ],
  "sourceIdentifier": "product-security@qualcomm.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.