Skip to main content

Qcmap

1 CVEs product

Monthly

CVE-2020-25859 Oct 15, 16:15 MEDIUM POC This Month

The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while handling a SetGatewayUrl() request. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Qualcomm Qcmap
NVD
CVSS 3.1
6.7
EPSS
0.3%
EPSS 0% CVSS 6.7
MEDIUM POC This Month

The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while handling a SetGatewayUrl() request. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Qualcomm Qcmap
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy