Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-11277

In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, the com.qualcomm.embms is a vendor package deployed in the system image which has an inadequate permission level and allows any application installed from Play Store to request this permission at install-time. The system application interfaces with the Radio Interface Layer leading to potential access control issue.

Published

2018-09-20T13:29:01.167

Last Modified

2024-11-21T03:43:02.667

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm msm8909w_firmware - Yes
Hardware qualcomm msm8909w - No
Operating System qualcomm msm8996au_firmware - Yes
Hardware qualcomm msm8996au - No
Operating System qualcomm sd210_firmware - Yes
Hardware qualcomm sd210 - No
Operating System qualcomm sd212_firmware - Yes
Hardware qualcomm sd212 - No
Operating System qualcomm sd205_firmware - Yes
Hardware qualcomm sd205 - No
Operating System qualcomm sd430_firmware - Yes
Hardware qualcomm sd430 - No
Operating System qualcomm sd450_firmware - Yes
Hardware qualcomm sd450 - No
Operating System qualcomm sd615_firmware - Yes
Hardware qualcomm sd615 - No
Operating System qualcomm sd616_firmware - Yes
Hardware qualcomm sd616 - No
Operating System qualcomm sd415_firmware - Yes
Hardware qualcomm sd415 - No
Operating System qualcomm sd617_firmware - Yes
Hardware qualcomm sd617 - No
Operating System qualcomm sd625_firmware - Yes
Hardware qualcomm sd625 - No
Operating System qualcomm sd650_firmware - Yes
Hardware qualcomm sd650 - No
Operating System qualcomm sd652_firmware - Yes
Hardware qualcomm sd652 - No
Operating System qualcomm sd810_firmware - Yes
Hardware qualcomm sd810 - No
Operating System qualcomm sd820_firmware - Yes
Hardware qualcomm sd820 - No
Operating System qualcomm sd820a_firmware - Yes
Hardware qualcomm sd820a - No
Operating System qualcomm sd835_firmware - Yes
Hardware qualcomm sd835 - No
Operating System qualcomm sd845_firmware - Yes
Hardware qualcomm sd845 - No
Operating System qualcomm sda660_firmware - Yes
Hardware qualcomm sda660 - No
References