CVE-2020-25858

Katalog CVE

CVSS 7.5 · High EPSS 9,4%

Kerentanan NULL Pointer Dereference pada qualcomm mobile access point. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer() function. An attacker who invokes the web interface with a crafted URL can crash the process, causing denial of service. This version of QCMAP is used in many kinds of networking devices, primarily mobile hotspots and LTE routers.

Rincian

Terbit di NVD

15 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

9,4% peluang dieksploitasi; lebih tinggi dari 95,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://vdoo.com/blog/qualcomm-qcmap-vulnerabilities exploit · advisory pihak ketiga