SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-14092

System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9207C, MDM9607, Rennell, Saipan, SM8150, SM8250, SXR2130

MEDIUM 5.5EPSS 0.19%

Does this matter?

Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.

Description

System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9207C, MDM9607, Rennell, Saipan, SM8150, SM8250, SXR2130

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.19% probability · 8th percentile
CISA KEV
Not listed
Affected
qualcomm/mdm9206 firmware · qualcomm/mdm9207c firmware · qualcomm/mdm9607 firmware · qualcomm/rennell firmware · qualcomm/saipan firmware · qualcomm/sm8150 firmware · qualcomm/sm8250 firmware · qualcomm/sxr2130 firmware
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.