CVE-2018-11284
Spoofed SMS can be used to send a large number of messages to the device which will in turn...
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20
- Record
CVE-2018-11284- CVSS 3.0
- 9.3 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H - CVSS 2.0
- 8.5 High
AV:N/AC:L/Au:N/C:N/I:P/A:C - Updated
- 2026-11-02
CVE List No score
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20
- Record
CVE-2018-11284- Updated
- 2026-11-02
EUVDEUVD-2018-3324 No score
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20
- Record
EUVD-2018-3324- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gc3r-24qm-x3hq
Spoofed SMS can be used to send a large number of messages to the device which will in turn...
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20
- Record
GHSA-gc3r-24qm-x3hq- CVSS 3.0
- 9.3 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H - Updated
- 2026-11-02
Affected products
- qualcomm mdm9206 firmware
- qualcomm mdm9607 firmware
- qualcomm mdm9650 firmware
- qualcomm sd 205 firmware
- qualcomm sd 210 firmware
- qualcomm sd 212 firmware
- qualcomm sd 625 firmware
- qualcomm sd 636 firmware
- qualcomm sda660 firmware
- qualcomm sdm630 firmware
- qualcomm sdm660 firmware
- qualcomm sdx20 firmware
Show 1 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-11284 is a critical vulnerability (CVSS 9.3) in Qualcomm Mdm9206 Firmware, published January 18, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. No source names a fixed version.