Attacker Value
Unknown
0
CVE-2020-11233
0
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2020-11233
(Last updated February 22, 2025) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
MITRE ATT&CK
Select the MITRE ATT&CK Tactics that apply to this CVE
Collection
Select any Techniques used:
Command and Control
Select any Techniques used:
Credential Access
Select any Techniques used:
Defense Evasion
Select any Techniques used:
Discovery
Select any Techniques used:
Execution
Select any Techniques used:
Exfiltration
Select any Techniques used:
Impact
Select any Techniques used:
Initial Access
Select any Techniques used:
Lateral Movement
Select any Techniques used:
Persistence
Select any Techniques used:
Privilege Escalation
Select any Techniques used:
Topic Tags
Select the tags that apply to this CVE (Assessment added tags are disabled and cannot be removed)
What makes this of high-value to an attacker?
What makes this of low-value to an attacker?
Description
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
7.0 High
Impact Score:
5.9
Exploitability Score:
1
Attack Vector (AV):
Local
Attack Complexity (AC):
High
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables APQ8009, APQ8009W, APQ8017, APQ8053, APQ8076, APQ8096AU, CSR6030, MDM9206, MDM9230, MDM9250, MDM9330, MDM9607, MDM9626, MDM9628, MDM9630, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8937, MSM8996AU, PM215, PM439, PM660, PM8004, PM8909, PM8916, PM8937, PM8952, PM8953, PM8956, PM8996, PMD9607, PMD9635, PMD9645, PMD9655, PMI632, PMI8937, PMI8952, PMI8994, PMI8996, PMK8001, PMM8996AU, PMX20, QCA4020, QCA6174, QCA6174A, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCA6584, QCA9367, QCA9377, QCA9379, QCC1110, QCC112, QET4100, QET4101, QET4200AQ, QFE1035, QFE1040, QFE1045, QFE2340, QFE2550, QFE3100, QFE3320, QFE3335, QFE3345, QLN1021AQ, QLN1030, QLN1031, QLN1036AQ, QSW8573, QTC801S, Qualcomm215, RGR7640AU, SD205, SD210, SD439, SD820, SDW2500, SDW3100, SDX20, SDX20M, SMB1350, SMB1351, SMB1355, SMB1357, SMB1358, SMB1360, SMB231, SMB358S, WCD9306, WCD9326, WCD9330, WCD9335, WCN3610, WCN3615, WCN3620, WCN3660B, WCN3680, WCN3680B, WGR7640, WSA8810, WSA8815, WTR2955, WTR2965, WTR3905, WTR3925, WTR4905, WTR5975
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown
Vendors
Products
- apq8009 firmware -,
- apq8009w firmware -,
- apq8017 firmware -,
- apq8053 firmware -,
- apq8076 firmware -,
- apq8096au firmware -,
- csr6030 firmware -,
- mdm9206 firmware -,
- mdm9230 firmware -,
- mdm9250 firmware -,
- mdm9330 firmware -,
- mdm9607 firmware -,
- mdm9626 firmware -,
- mdm9628 firmware -,
- mdm9630 firmware -,
- mdm9640 firmware -,
- mdm9650 firmware -,
- mdm9655 firmware -,
- msm8909w firmware -,
- msm8937 firmware -,
- msm8996au firmware -,
- pm215 firmware -,
- pm439 firmware -,
- pm660 firmware -,
- pm8004 firmware -,
- pm8909 firmware -,
- pm8916 firmware -,
- pm8937 firmware -,
- pm8952 firmware -,
- pm8953 firmware -,
- pm8956 firmware -,
- pm8996 firmware -,
- pmd9607 firmware -,
- pmd9635 firmware -,
- pmd9645 firmware -,
- pmd9655 firmware -,
- pmi632 firmware -,
- pmi8937 firmware -,
- pmi8952 firmware -,
- pmi8994 firmware -,
- pmi8996 firmware -,
- pmk8001 firmware -,
- pmm8996au firmware -,
- pmx20 firmware -,
- qca4020 firmware -,
- qca6174 firmware -,
- qca6174a firmware -,
- qca6564a firmware -,
- qca6564au firmware -,
- qca6574a firmware -,
- qca6574au firmware -,
- qca6584 firmware -,
- qca9367 firmware -,
- qca9377 firmware -,
- qca9379 firmware -,
- qcc1110 firmware -,
- qcc112 firmware -,
- qet4100 firmware -,
- qet4101 firmware -,
- qet4200aq firmware -,
- qfe1035 firmware -,
- qfe1040 firmware -,
- qfe1045 firmware -,
- qfe2340 firmware -,
- qfe2550 firmware -,
- qfe3100 firmware -,
- qfe3320 firmware -,
- qfe3335 firmware -,
- qfe3345 firmware -,
- qln1021aq firmware -,
- qln1030 firmware -,
- qln1031 firmware -,
- qln1036aq firmware -,
- qsw8573 firmware -,
- qtc801s firmware -,
- qualcomm215 firmware -,
- rgr7640au firmware -,
- sd205 firmware -,
- sd210 firmware -,
- sd439 firmware -,
- sd820 firmware -,
- sdw2500 firmware -,
- sdw3100 firmware -,
- sdx20 firmware -,
- sdx20m firmware -,
- smb1350 firmware -,
- smb1351 firmware -,
- smb1355 firmware -,
- smb1357 firmware -,
- smb1358 firmware -,
- smb1360 firmware -,
- smb231 firmware -,
- smb358s firmware -,
- wcd9306 firmware -,
- wcd9326 firmware -,
- wcd9330 firmware -,
- wcd9335 firmware -,
- wcn3610 firmware -,
- wcn3615 firmware -,
- wcn3620 firmware -,
- wcn3660b firmware -,
- wcn3680 firmware -,
- wcn3680b firmware -,
- wgr7640 firmware -,
- wsa8810 firmware -,
- wsa8815 firmware -,
- wtr2955 firmware -,
- wtr2965 firmware -,
- wtr3905 firmware -,
- wtr3925 firmware -,
- wtr4905 firmware -,
- wtr5975 firmware -
Weaknesses
References
Additional Info
Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Rapid7
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
