{"id":"CVE-2020-11117","aliases":["EUVD-2020-3471","GHSA-wjc6-gjj8-cjmf"],"status":"published","title":"u'In the lbd service, an external user can issue a specially crafted debug command to overwrite...","description":"u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.19677,"percentile":0.97431,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-77"],"published":"2020-09-08T09:31:35Z","modified":"2026-06-17T02:49:05Z","products":[{"vendor":"qualcomm","product":"ipq4019_firmware"},{"vendor":"qualcomm","product":"ipq6018_firmware"},{"vendor":"qualcomm","product":"ipq8064_firmware"},{"vendor":"qualcomm","product":"ipq8074_firmware"},{"vendor":"qualcomm","product":"qca4531_firmware"},{"vendor":"qualcomm","product":"qca9531_firmware"},{"vendor":"qualcomm","product":"qca9980_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon connectivity, snapdragon consumer iot, snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1065","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11117"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/august-2020-security-bulletin"},{"url":"https://github.com/advisories/GHSA-wjc6-gjj8-cjmf"}],"sources":{"cve":[{"id":"CVE-2020-11117","description":"u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980","status":"published","published":"2020-09-08T09:31:35Z","modified":"2024-08-04T11:21:14.657Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3471","description":"u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980","status":"published","published":"2020-09-08T09:31:35Z","modified":"2024-08-04T11:21:14Z","updated_at":"2026-11-03T03:07:47.591202Z"}],"ghsa":[{"id":"GHSA-wjc6-gjj8-cjmf","title":"u'In the lbd service, an external user can issue a specially crafted debug command to overwrite...","description":"u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980","status":"published","published":"2022-05-24T17:27:31Z","modified":"2023-01-29T05:03:58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20","CWE-77"],"updated_at":"2026-11-02T14:45:26.555782Z"}],"nvd":[{"id":"CVE-2020-11117","description":"u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980","status":"published","published":"2020-09-08T10:15:14.217Z","modified":"2026-06-17T02:49:05.477Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:06:14.981587Z"}]}}