The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while handling a SetGatewayUrl() request. A local attacker with shell access can pass shell metacharacters and run arbitrary commands. If QCMAP_CLI can be run via sudo or setuid, this also allows elevating privileges to root. This version of QCMAP is used in many kinds of networking devices, primarily mobile hotspots and LTE routers.
References
Link | Resource |
---|---|
http://vdoo.com/blog/qualcomm-qcmap-vulnerabilities | Exploit Third Party Advisory |
http://vdoo.com/blog/qualcomm-qcmap-vulnerabilities | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 05:18
Type | Values Removed | Values Added |
---|---|---|
References | () http://vdoo.com/blog/qualcomm-qcmap-vulnerabilities - Exploit, Third Party Advisory |
Information
Published : 2020-10-15 16:15
Updated : 2024-11-21 05:18
NVD link : CVE-2020-25859
Mitre link : CVE-2020-25859
CVE.ORG link : CVE-2020-25859
JSON object : View
Products Affected
qualcomm
- qcmap
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')