Vulnerability · Published Jun 22, 2020 · Assigned by qualcomm
CVE-2020-3628
Critical 9.8
In plain English
A critical-severity security flaw in Snapdragon Consumer IOT, Snapdragon Mobile from Qualcomm, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.0%top 38.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, Rennell, SDX20
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm, Inc. | Snapdragon Consumer IOT, Snapdragon Mobile | APQ8053, Rennell, SDX20 |
References
- https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin x_refsource_CONFIRM