CVE-2020-11301

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon…

Critical · published September 8, 2021

CVSS v3.1
9.1
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

🚨 Improper authentication of unencrypted plaintext Wi-Fi frames could expose sensitive information in a variety of Snapdragon products! This is a serious issue, and it’s time to take action! 🔥 Think of it as a secured conference room where everyone has access to encrypted discussions, but someone can overhear the plain talk happening in the hallway outside—totally confidential chats are at risk! An attacker could listen in on unencrypted data, potentially snatching sensitive information like passwords or personal messages, making this vulnerability a treasure trove for cyber snoopers. The potential for information disclosure in a wide range of devices, from mobile phones to IoT gadgets, could lead to absolutely devastating breaches.

Put simply

Think of it as a secured conference room where everyone has access to encrypted discussions, but someone can overhear the plain talk happening in the hallway outside—totally confidential chats are at risk! This vulnerability arises due to improper authentication of unencrypted plaintext Wi-Fi frames in encrypted networks, allowing attackers to exploit this oversight and access sensitive information.

What to do

An attacker could listen in on unencrypted data, potentially snatching sensitive information like passwords or personal messages, making this vulnerability a treasure trove for cyber snoopers. The potential for information disclosure in a wide range of devices, from mobile phones to IoT gadgets, could lead to absolutely devastating breaches. To remediate this issue, ensure that all affected Snapdragon devices are updated to the latest firmware version from Qualcomm. Implement more robust security measures to validate plaintext Wi-Fi frames and monitor network traffic for anomalies. Being proactive is key! You've got this! By following these steps, you can secure your devices and protect your data. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.11108 · 95.9th percentile
Published
2021-09-08T11:25Z
EPSS history
Timeline
  • 08 SEP 11:25Z
    Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon…
    cvelistv5