CVE-2020-11177

highPriorität · verfolgen · 35EPSS 0.002 · 6. PerzentilDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.17% (6th) EPSS

CVSS 7.2 · high

Is it mine?

418 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · endress_hauser_psirt

EPSS · bewertet 2026-10-27

User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenendress_hauser_psirt
Endress+Hauser has released an updated firmware for the affected device that includes a security patch for the radio chip to address this vulnerability. Customers are encouraged to update their devices to the latest firmware version as soon as possible. For assistance, please contact your local Endress+Hauser service center.
Mitigationendress_hauser_psirt
If a firmware update is no longer possible, it is recommended to replace the device.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 10

v3.18.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2 · Auswirkung 6

v3.18.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · Endress+Hauser PSIRT DE

v3.18.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-284US

betroffene Produkte (418)

Betroffene Produkte und Versionsbereiche.

BlackBerry BlackBerryalle Versionencert_bundDEcpe:/h:rim:blackberry:-
Google Android 10alle Versionencert_bundDEcpe:/o:google:android:10.0
Google Android 11alle Versionencert_bundDEcpe:/o:google:android:11
Google Android 8.1alle Versionencert_bundDEcpe:/o:google:android:8.1
Google Android 9alle Versionencert_bundDEcpe:/o:google:android:9
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
Firmware 01.00.08 installed on Promag W 800alle Versionenfixedendress_hauser_psirtDEcpe:2.3:o:endress_hauser_promag_w_800_firmware:01.00.08:*:*:*:*:*:*:*:*
Firmware 01.02.00 installed on Liquiline Edge Module EMR alle Versionenfixedendress_hauser_psirtDEcpe:2.3:o:endress_hauser_liquiline_edge_module_emr_firmware:01.02.00:*:*:*:*:*:*:*:*
Firmware <01.00.08 installed on Promag W 800alle Versionenendress_hauser_psirtDEcpe:2.3:o:endress_hauser_promag_w_800_firmware:01.00.07:*:*:*:*:*:*:*:*
Firmware <01.02.00 installed on Liquiline Edge Module EMR alle Versionenendress_hauser_psirtDEcpe:2.3:o:endress_hauser_liquiline_edge_module_emr_firmware:01.01.00:*:*:*:*:*:*:*:*
Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables≤ APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8084, APQ8096AU, AQT1000, AR6003, AR8035, AR8151, CSR6030, CSRB31024, FSM10055, MDM8207, MDM8215, MDM8215M, MDM8615M, MDM9150, MDM9205, MDM9206, MDM9207, MDM9215, MDM9230, MDM9250, MDM9310, MDM9330, MDM9607, MDM9615, MDM9615M, MDM9625, MDM9628, MDM9630, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8108, MSM8208, MSM8209, MSM8608, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8976SG, MSM8996AU, PM3003A, PM4125, PM4250, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8018, PM8019, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM855, PM855A, PM855B, PM855L, PM855P, PM8909, PM8916, PM8937, PM8940, PM8952, PM8953, PM8956, PM8996, PM8998, PMC1000H, PMD9607, PMD9635, PMD9645, PMD9655, PMD9655AU, PME605, PMI632, PMI8937, PMI8940, PMI8952, PMI8994, PMI8996, PMI8998, PMK8001, PMK8002, PMM855AU, ...[truncated*]enisa_euvdEU
qualcomm apq8009 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:apq8009_firmware:*:*:*:*:*:*:*:*
qualcomm apq8009w firmwarealle VersionennvdUScpe:2.3:o:qualcomm:apq8009w_firmware:*:*:*:*:*:*:*:*
qualcomm apq8017 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:apq8017_firmware:*:*:*:*:*:*:*:*
qualcomm apq8037 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:apq8037_firmware:*:*:*:*:*:*:*:*
qualcomm apq8053 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:apq8053_firmware:*:*:*:*:*:*:*:*
qualcomm apq8084 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:apq8084_firmware:*:*:*:*:*:*:*:*
qualcomm apq8096au firmwarealle VersionennvdUScpe:2.3:o:qualcomm:apq8096au_firmware:*:*:*:*:*:*:*:*
qualcomm aqt1000 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:aqt1000_firmware:*:*:*:*:*:*:*:*
qualcomm ar6003 firmwarealle VersionennvdUScpe:2.3:o:qualcomm:ar6003_firmware:*:*:*:*:*:*:*:*

20 von 418 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

VDE-2025-107Endress+Hauser: Multiple products affected by Qualcomm vulnerabilities2025-12-05csaf · endress_hauser_psirtDE
Multiple vulnerabilities in a Qualcomm component have been reported in a closed-source report. This component is an integral part of the radio chip found in several Endress+Hauser products.
WID-SEC-W-2023-0360Google Android: Mehrere SchwachstellenDeutsch2021-02-01csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, einen Denial of Service Absturz herbeizuführen, seine Privilegien zu erhöhen oder unbekannte Auswirkungen zu verursachen.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cert_bund endress_hauser_psirt nvd NVD CVE.org MITRE

veröffentlicht 2021-02-22geändert 2026-06-17

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan