First published: Mon Jun 22 2020(Updated: )
System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9207C, MDM9607, Rennell, Saipan, SM8150, SM8250, SXR2130
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Qualcomm MDM9206 | ||
Qualcomm MDM9206 firmware | ||
qualcomm MDM9207C firmware | ||
Qualcomm 9207 LTE Modem | ||
Qualcomm MD9607 Firmware | ||
Qualcomm MDM9607 firmware | ||
Qualcomm Rennell | ||
qualcomm Rennell firmware | ||
Qualcomm Saipan Firmware | ||
Qualcomm Saipan Firmware | ||
Qualcomm SM8150P Firmware | ||
Qualcomm SM8150 Fusion | ||
Qualcomm SM8250 | ||
Qualcomm qsm8250 | ||
qualcomm SXR2130P firmware | ||
Qualcomm SXR2130 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-14092 has a high severity rating due to the potential for information exposure.
To fix CVE-2019-14092, ensure that the affected Qualcomm firmware is updated to the latest version provided by Qualcomm.
Devices affected by CVE-2019-14092 include the Qualcomm MDM9206, MDM9207C, MDM9607, and others in the Snapdragon line.
CVE-2019-14092 is an information exposure vulnerability due to inadequate permission protection in system services.
Yes, CVE-2019-14092 specifically affects Qualcomm products and their firmware implementations.