CVE-2020-3702

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150

• CWE-319

• https://lists.debian.org/debian-lts-announce/2021/10/msg00010.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00012.htmlMailing List, Third Party Advisory
• https://www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58Third Party Advisory
• https://www.debian.org/security/2021/dsa-4978Third Party Advisory
• https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletinVendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/10/msg00010.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00012.htmlMailing List, Third Party Advisory
• https://www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58Third Party Advisory
• https://www.debian.org/security/2021/dsa-4978Third Party Advisory
• https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletinVendor Advisory

Published

Sep 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-37014Tryton 5.4 contains a persistent cross-site scripting vulner…6.4
• CVE-2020-37015The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contai…7.5
• CVE-2020-37016BarcodeOCR 19.3.6 contains an unquoted service path vulnerab…8.5
• CVE-2020-37017CodeMeter 6.60 contains an unquoted service path vulnerabili…8.5
• CVE-2020-37018GOautodial 4.0 contains a persistent cross-site scripting vu…6.4
• CVE-2020-37019Orchard Core RC1 contains a persistent cross-site scripting …6.4
• CVE-2020-37020SonarQube 8.3.1 contains an unquoted service path vulnerabil…8.5
• CVE-2020-3702110-Strike Bandwidth Monitor 3.9 contains an unquoted service…8.5
• CVE-2020-37022OpenZ ERP 3.6.60 contains a persistent cross-site scripting …6.4
• CVE-2020-37023Koken CMS 0.22.24 contains a file upload vulnerability that …8.8
• CVE-2020-37024Nidesoft DVD Ripper 5.2.18 contains a local buffer overflow …8.4
• CVE-2020-37025Port Forwarding Wizard 4.8.0 contains a buffer overflow vuln…8.4