CVE:CVE-2020-3702
CNNVD:CNNVD-202008-066
Qualcomm MSM8996AU等都是美国高通（Qualcomm）公司的产品。MSM8996AU是一款中央处理器（CPU）产品。SDX20是一款调制解调器。APQ8053是一款中央处理器（CPU）产品。
多款Qualcomm产品中的WIFI driver(Krook)存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。以下产品及版本受到影响：Qualcomm APQ8053；IPQ4019；IPQ8064；MSM8909W；MSM8996AU；QCA9531；QCN5502；QCS405；SDX20；SM6150；SM7150。
solution:Upgrade qualcomm apq8053_firmware to a higher version than -; Upgrade qualcomm ipq4019_firmware to a higher version than -; Upgrade qualcomm ipq8064_firmware to a higher version than -; Upgrade qualcomm msm8909w_firmware to a higher version than -; Upgrade qualcomm msm8996au_firmware to a higher version than -; Upgrade qualcomm qca9531_firmware to a higher version than -; Upgrade qualcomm qcn5502_firmware to a higher version than -; Upgrade qualcomm qcs405_firmware to a higher version than -; Upgrade qualcomm sdx20_firmware to a higher version than -; Upgrade qualcomm sm6150_firmware to a higher version than -; Upgrade qualcomm sm7150_firmware to a higher version than -; Upgrade debian debian_linux to a higher version than 10.0,9.0,and avoid the version 10.0,9.0; Upgrade arista access_point to a higher version than 8.8.3-12,and avoid the version (,8.8.3-12]