CVE-2020-3702
Description
uSpecifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150
Risk Information
Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.314
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Linux kernel (USN-5113-1) linux-image-aws_5.11.0.1020.21_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-aws_5.11.0.1020.21~20.04.19_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-gcp_5.11.0.1021.21_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-gcp_5.11.0.1021.23~20.04.20_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-gke_5.11.0.1021.21_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-kvm_5.11.0.1018.19_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-azure_5.11.0.1020.21_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-generic_5.11.0.38.39_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-virtual_5.11.0.38.39_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-oem-20.04_5.11.0.38.39_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-azure-edge_5.15.0.1054.62~20.04.43_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-lowlatency_5.11.0.38.39_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-1018-kvm_5.11.0-1018.19_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-1020-aws_5.11.0-1020.21_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-1020-aws_5.11.0-1020.21~20.04.2_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-1021-gcp_5.11.0-1021.23_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-1021-gcp_5.11.0-1021.23~20.04.1_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-1020-azure_5.11.0-1020.21_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-1020-azure_5.11.0-1020.21~20.04.1_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-38-generic_5.11.0-38.42_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-38-generic_5.11.0-38.42~20.04.1_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-generic-hwe-20.04_5.11.0.38.42~20.04.17_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-virtual-hwe-20.04_5.11.0.38.42~20.04.17_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-38-lowlatency_5.11.0-38.42_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-38-lowlatency_5.11.0-38.42~20.04.1_amd64.deb | Linux |
| Linux kernel (USN-5113-1) linux-image-lowlatency-hwe-20.04_5.11.0.38.42~20.04.17_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-kvm_4.15.0.1101.97_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-generic_4.15.0.161.150_i386.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-generic_4.15.0.161.150_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-virtual_4.15.0.161.150_i386.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-virtual_4.15.0.161.150_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-dell300x_4.15.0.1029.31_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-lowlatency_4.15.0.161.150_i386.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-lowlatency_4.15.0.161.150_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-aws-lts-18.04_4.15.0.1114.117_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-gcp-lts-18.04_4.15.0.1110.129_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-4.15.0-1101-kvm_4.15.0-1101.103_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-4.15.0-1110-gcp_4.15.0-1110.124_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-4.15.0-1114-aws_4.15.0-1114.121_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-azure-lts-18.04_4.15.0.1125.98_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-4.15.0-1125-azure_4.15.0-1125.138_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-4.15.0-161-generic_4.15.0-161.169_i386.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-4.15.0-161-generic_4.15.0-161.169_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-4.15.0-1029-dell300x_4.15.0-1029.34_amd64.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-4.15.0-161-lowlatency_4.15.0-161.169_i386.deb | Linux |
| Linux kernel (USN-5114-1) linux-image-4.15.0-161-lowlatency_4.15.0-161.169_amd64.deb | Linux |
| Linux kernel for OEM systems (USN-5115-1) linux-image-oem-20.04_5.10.0.1050.52_amd64.deb | Linux |
| Linux kernel for OEM systems (USN-5115-1) linux-image-oem-20.04b_5.10.0.1050.52_amd64.deb | Linux |
| Linux kernel for OEM systems (USN-5115-1) linux-image-5.10.0-1050-oem_5.10.0-1050.52_amd64.deb | Linux |
| SUSE-SU-2021:3389-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-4.12.14-16.76.2.x86_64.rpm | Linux |
| SUSE-SU-2021:3389-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-4.12.14-16.76.2.x86_64.rpm | Linux |
| SUSE-SU-2021:3389-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-debuginfo-4.12.14-16.76.2.x86_64.rpm | Linux |
| SUSE-SU-2021:3389-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debuginfo-4.12.14-16.76.2.x86_64.rpm | Linux |
| SUSE-SU-2021:3389-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debugsource-4.12.14-16.76.2.x86_64.rpm | Linux |
| SUSE-SU-2021:3389-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-devel-4.12.14-16.76.2.x86_64.rpm | Linux |
| SUSE-SU-2021:3389-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-azure-4.12.14-16.76.2.noarch.rpm | Linux |
| SUSE-SU-2021:3389-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-azure-4.12.14-16.76.2.noarch.rpm | Linux |
| SUSE-SU-2021:3389-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-azure-4.12.14-16.76.2.x86_64.rpm | Linux |
| Linux kernel (USN-5113-1) linux-image-5.11.0-1020-oracle_5.11.0-1020.21~20.04.1_amd64.deb | Linux |
| snapdragon (USN-5114-1) linux-image-4.15.0-1082-oracle_4.15.0-1082.90_amd64.deb | Linux |
| raspi (USN-5116-2) linux-image-5.4.0-1006-ibm_5.4.0-1006.7_amd64.deb | Linux |
| raspi (USN-5116-2) linux-image-5.4.0-1056-gcp_5.4.0-1056.60_amd64.deb | Linux |
| raspi (USN-5116-2) linux-image-5.4.0-1056-gcp_5.4.0-1056.60~18.04.1_amd64.deb | Linux |
| Cleartext Transmission of Sensitive Information Vulnerability (CVE-2020-3702) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234