CVE-2020-3702: arista access_point
Vulnerability summary
CVE-2020-3702 is a medium (CVSS 6.5) vulnerability in arista access_point. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 26% of scored vulnerabilities.
Not severe (CVSS 6.5, adjacent network); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 50 · Related 45Timeline
- 08-09-2020PublishedVulnerability first disclosed.
- 08-10-2026Last modifiedVulnerability information updated.
Description
u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
0.33%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
Increase +0.02 pp
From 0.31% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: adjacent network, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu61 products
- linuxAll versions (No fix recorded) | < 4.4.0-223.256 | < 4.15.0-161.169 | < 5.4.0-89.100
- linux-aws< 4.4.0-1103.108 | < 4.4.0-1139.153 | < 4.15.0-1114.121 | < 5.4.0-1058.61
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11< 5.11.0-1020.21~20.04.2
- linux-aws-5.3All versions (No fix recorded)
Qualcomm11 products
Debian2 products
- linux< 5.14.6-1
- debian_linuxEOL10.0 | 9.0
Arista1 product
- access_point≤ 8.8.3-12
4 vendors · 75 products
References
16 links- www.qualcomm.com/company/product-security/bulletins/august-2020-bulletinX Refsource CONFIRMVendor Advisory
- www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58X Refsource CONFIRMREPORTThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/10/msg00010.htmlMailing ListX Refsource MLISTThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/12/msg00012.htmlMailing ListX Refsource MLISTThird Party Advisory