cbcvebase.
CVE-2020-11264
published 2021-09-08

CVE-2020-11264: Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto…

PriorityP264critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
13.19%
95.9th percentile
Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Affected

1 ranges
VendorProductVersion rangeFixed in
googleandroid——

Detection & IOCsextracted from sources · hover to see the quote

  • →Monitor for non-EAPOL/WAPI plaintext frames being injected during the WPA four-way handshake negotiation, which may indicate exploitation of improper authentication in the WLAN stack on Qualcomm Snapdragon devices. ↗
  • →Flag unexpected plaintext data frames transmitted between a client and AP during the four-way handshake window (before PTK installation is complete), as this is the exploitation vector for arbitrary network packet injection. ↗
  • →Prioritize patching Qualcomm WLAN firmware/drivers on Android devices; this vulnerability is rated CRITICAL in the Android Security Bulletin (October 2021) under the WLAN component, tracked as A-175608649 / QC-CR#2860206. ↗
  • ·The vulnerability affects a broad range of Qualcomm Snapdragon product lines; detection and patching scope should cover all affected families: Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, and Voice & Music. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.