---
id: CVE-2020-3702
title: >-
  u'Specifically timed and handcrafted traffic can cause internal errors in a
  WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent
  possibility of information disclosure over the air for a discrete set of
  traffic' in…
summary: >-
  u'Specifically timed and handcrafted traffic can cause internal errors in a
  WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent
  possibility of information disclosure over the air for a discrete set of
  traffic' in…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-319
vendor: arista
product: access_point
affected:
  - apq8053_firmware
  - ipq4019_firmware
  - ipq8064_firmware
  - msm8909w_firmware
  - msm8996au_firmware
  - qca9531_firmware
  - qcn5502_firmware
  - qcs405_firmware
  - sdx20_firmware
  - sm6150_firmware
  - sm7150_firmware
  - debian_linux = 10.0
  - access_point <= 8.8.3-12
  - debian_linux = 9.0
published: '2020-09-08'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T21:17:30.337'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2020-3702'
references:
  - url: 'https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html'
    label: product-security@qualcomm.com
  - url: 'https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html'
    label: product-security@qualcomm.com
  - url: >-
      https://www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58
    label: product-security@qualcomm.com
  - url: 'https://www.debian.org/security/2021/dsa-4978'
    label: product-security@qualcomm.com
  - url: >-
      https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
    label: product-security@qualcomm.com
  - url: 'https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://www.arista.com/en/support/advisories-notices/security-advisories/11998-security-advisory-58
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.debian.org/security/2021/dsa-4978'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://www.qualcomm.com/company/product-security/bulletins/august-2020-bulletin
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00313
epssPercentile: 0.22205
ingestedAt: '2026-10-08T22:11:53.719Z'
---

## Overview

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150

## Affected

- `apq8053_firmware`
- `ipq4019_firmware`
- `ipq8064_firmware`
- `msm8909w_firmware`
- `msm8996au_firmware`
- `qca9531_firmware`
- `qcn5502_firmware`
- `qcs405_firmware`
- `sdx20_firmware`
- `sm6150_firmware`
- `sm7150_firmware`
- `debian_linux = 10.0`
- `access_point <= 8.8.3-12`
- `debian_linux = 9.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.