CVE-2020-3702
Description
u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm apq8053_firmware | No range specified | — |
| qualcomm ipq4019_firmware | No range specified | — |
| qualcomm ipq8064_firmware | No range specified | — |
| qualcomm msm8909w_firmware | No range specified | — |
| qualcomm msm8996au_firmware | No range specified | — |
| qualcomm qca9531_firmware | No range specified | — |
| qualcomm qcn5502_firmware | No range specified | — |
| qualcomm qcs405_firmware | No range specified | — |
| qualcomm sdx20_firmware | No range specified | — |
| qualcomm sm6150_firmware | No range specified | — |
| qualcomm sm7150_firmware | No range specified | — |
| debian debian_linux | 10.0, 9.0 | — |
| arista access_point | v ≤ 8.8.3-12 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.