1. Home
  2. CVE Database
  3. CVE-2020-3645
HIGH · 7.5

CVE-2020-3645

Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics...

Vulnerability Description

Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, QCS605, Rennell, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
QualcommIpq6018 Firmware-
QualcommIpq6018-
QualcommIpq8074 Firmware-
QualcommIpq8074-
QualcommKamorta Firmware-
QualcommKamorta-
QualcommNicobar Firmware-
QualcommNicobar-
QualcommQca6390 Firmware-
QualcommQca6390-
QualcommQca8081 Firmware-
QualcommQca8081-
QualcommQcs404 Firmware-
QualcommQcs404-
QualcommQcs405 Firmware-
QualcommQcs405-
QualcommRennell Firmware-
QualcommRennell-
QualcommSc7180 Firmware-
QualcommSc7180-

Related Weaknesses (CWE)

CWE-617

References

FAQ

What is CVE-2020-3645?

CVE-2020-3645 is a vulnerability with a CVSS score of 7.5 (HIGH). Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics...

How severe is CVE-2020-3645?

CVE-2020-3645 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-3645?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Ipq6018 Firmware, Qualcomm Ipq6018, Qualcomm Ipq8074 Firmware, Qualcomm Ipq8074, Qualcomm Kamorta Firmware.