Strix
26.1K

CVE-2020-11157

HIGHCVSS 7.5/10EPSS 0.41%

Last modified

CVE-2020-11157 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8076, MDM9640, MDM9650, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, QCA6174A, QCA9886, QCM2150, QM215, SDM429, SDM439, SDM450, SDM632. EPSS estimates a 0.41% chance of exploitation in the next 30 days.

Description

u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8076, MDM9640, MDM9650, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, QCA6174A, QCA9886, QCM2150, QM215, SDM429, SDM439, SDM450, SDM632

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
0.41%

32.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
QualcommApq8053 FirmwareAll versions
QualcommApq8076 FirmwareAll versions
QualcommMdm9640 FirmwareAll versions
QualcommMdm9650 FirmwareAll versions
QualcommMsm8905 FirmwareAll versions
QualcommMsm8917 FirmwareAll versions
QualcommMsm8937 FirmwareAll versions
QualcommMsm8940 FirmwareAll versions
QualcommMsm8953 FirmwareAll versions
QualcommQca6174a FirmwareAll versions
QualcommQca9886 FirmwareAll versions
QualcommQcm2150 FirmwareAll versions
QualcommQm215 FirmwareAll versions
QualcommSdm429 FirmwareAll versions
QualcommSdm439 FirmwareAll versions
QualcommSdm450 FirmwareAll versions
QualcommSdm632 FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2020-11157?
u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8076, MDM9640, MDM9650, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, QCA6174A, QCA9886, QCM2150, QM215, SDM429, SDM439, SDM450, SDM632
How severe is CVE-2020-11157?
CVE-2020-11157 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.41% probability of exploitation in the next 30 days.
How do I fix CVE-2020-11157?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-11157?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST