Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer() function. An attacker who invokes the web interface with a crafted URL can crash the process, causing denial of service. This version of QCMAP is used in many kinds of networking devices, primarily mobile hotspots and LTE routers.
CVSS Information
N/A
Vulnerability Type
空指针解引用
Vulnerability Title
Qualcomm QCMAP 代码问题漏洞
Vulnerability Description
Qualcomm QCMAP是美国高通(Qualcomm)公司的基于Linux的移动电话的数据接入点。 高通 QCMAP Web 2020年10月版本 存在安全漏洞,该漏洞源于客户端二进制代码不验证Tokenizer()函数中strstr()或strchr()调用的返回值,攻击者可利用该漏洞可能会使进程崩溃,从而导致服务拒绝。
CVSS Information
N/A
Vulnerability Type
N/A