Command Injection Vulnerability in Qualcomm QCMAP Utility for Mobile Hotspots and LTE Routers
CVE-2020-25859
6.7MEDIUM
Summary
The QCMAP_CLI utility in Qualcomm's QCMAP software prior to versions released in October 2020 is vulnerable to a command injection flaw. The issue arises from the use of an unsecured system() call when processing SetGatewayUrl() requests. This oversight allows a local attacker with shell access to inject shell metacharacters, enabling execution of arbitrary commands. Furthermore, if QCMAP_CLI operates with elevated permissions, such as through sudo or setuid, this flaw presents an opportunity for privilege escalation to root, posing a significant security threat to mobile hotspots and LTE routers utilizing this software.
Affected Version(s)
Qualcomm QCMAP Fixed in October 2020
References
CVSS V3.1
Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved