← Back

CVE-2020-11209

nvd nist
Published: Nov 12, 2020Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439

Affected (13)

Qualcomm
13 products
Sd820 Firmware
Sd821 Firmware
Qcs603 Firmware
Qcs605 Firmware
Sda855 Firmware
Sa6145p Firmware
Sa6155 Firmware
Sa6155p Firmware
Sd855 Firmware
Sd 675 Firmware
Sd660 Firmware
Sd429 Firmware
Sd439 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd820 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd820
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd821 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd821
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Qcs603 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Qcs603
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Qcs605 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Qcs605
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sda855 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sda855
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sa6145p Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sa6145p
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sa6155 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sa6155
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sa6155p Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sa6155p
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd855 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd855
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd 675 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd 675
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd660 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd660
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd429 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd429
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sd439 Firmware
All versions
Running on/withPlatform Versions
Qualcomm
Sd439
All versions

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (6)

Source: product-security@qualcomm.com
Third Party Advisory
Source: product-security@qualcomm.com
ExploitThird Party Advisory
Source: product-security@qualcomm.com
Broken LinkVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkVendor Advisory

Timeline

No history available yet.