PT-2020-17684 · Hewlett Packard · Hpav2

Published 2020-07-31 · Updated 2020-08-10 · CVE-2020-3681

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HPAV2 system (affected versions not specified)

Description The issue allows authenticated and encrypted payload MMEs to be forged and remotely sent to any HPAV2 system. This can be achieved by using a jailbreak key that can be recovered from the code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2020-3681

Affected Products

Hpav2

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-3681 · Security Note
• https://qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin#_cve-2020-3681 · Note
• https://qualcomm.com/company/product-security/bulletins/july-2020-bulletin · Note