CVE-2020-11117: Command Injection
u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-11117?
CVE-2020-11117 is a vulnerability in the lbd service that allows an external user to overwrite arbitrary files with arbitrary content, resulting in remote code execution.
What is the severity of CVE-2020-11117?
CVE-2020-11117 has a severity rating of 9.8 (critical).
Which software is affected by CVE-2020-11117?
CVE-2020-11117 affects Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064.
How can CVE-2020-11117 be fixed?
To fix CVE-2020-11117, it is recommended to apply the patches provided by Qualcomm and follow their guidance.
Where can I find more information about CVE-2020-11117?
You can find more information about CVE-2020-11117 on the Qualcomm Product Security Bulletins website and Talos Intelligence vulnerability report.