Command Injection Vulnerability in Qualcomm QCMAP Utility for Mobile Hotspots and LTE Routers
CVE-2020-25859

6.7MEDIUM

Key Information:

Vendor
Qualcomm
Status
Qualcomm Qcmap
Vendor
CVE Published:
15 October 2020

Summary

The QCMAP_CLI utility in Qualcomm's QCMAP software prior to versions released in October 2020 is vulnerable to a command injection flaw. The issue arises from the use of an unsecured system() call when processing SetGatewayUrl() requests. This oversight allows a local attacker with shell access to inject shell metacharacters, enabling execution of arbitrary commands. Furthermore, if QCMAP_CLI operates with elevated permissions, such as through sudo or setuid, this flaw presents an opportunity for privilege escalation to root, posing a significant security threat to mobile hotspots and LTE routers utilizing this software.

Affected Version(s)

Qualcomm QCMAP Fixed in October 2020

References

http://vdoo.com/blog/qualcomm-qcmap-vulnerabilities
x_refsource_MISC

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.