What’s Vulnerable › Vulnerabilities
CVE-2020-3702
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-09-08 · updated 2026-10-08
- Weakness: CWE-319
Description
u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150
Affected products
- Arista Access Point: through 8.8.3-12
- Debian Linux: 10.0, 9.0
- Qualcomm Apq8053 Firmware: all versions
- Qualcomm Ipq4019 Firmware: all versions
- Qualcomm Ipq8064 Firmware: all versions
- Qualcomm Msm8909W Firmware: all versions
- Qualcomm Msm8996Au Firmware: all versions
- Qualcomm Qca9531 Firmware: all versions
- Qualcomm Qcn5502 Firmware: all versions
- Qualcomm Qcs405 Firmware: all versions
- Qualcomm Sdx20 Firmware: all versions
- Qualcomm Sm6150 Firmware: all versions
- Qualcomm Sm7150 Firmware: all versions
References
- https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html
- https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
- https://www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58
- https://www.debian.org/security/2021/dsa-4978
- https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
- https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html
- https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
- https://www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58
- https://www.debian.org/security/2021/dsa-4978
- https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
Get alerted when CVE-2020-3702 or the next vulnerability affects your stack