Lucene search

[email protected]CVE-2021-30302

HistoryOct 20, 2021 - 7:15 a.m.

CVE-2021-30302

2021-10-2007:15:08

CWE-287

[email protected]

web.nvd.nist.gov

cve-2021-30302

improper authentication

eap

wapi

eapol

information disclosure

snapdragon

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.8%

JSON

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Affected configurations

NVD

Node

qualcommaqt1000Match-

AND

qualcommaqt1000_firmwareMatch-

Node

qualcommar8035Match-

AND

qualcommar8035_firmwareMatch-

Node

qualcommar9380Match-

AND

qualcommar9380_firmwareMatch-

Node

qualcommcsr8811Match-

AND

qualcommcsr8811_firmwareMatch-

Node

qualcommipq4018Match-

AND

qualcommipq4018_firmwareMatch-

Node

qualcommipq4028Match-

AND

qualcommipq4028_firmwareMatch-

Node

qualcommipq4029Match-

AND

qualcommipq4029_firmwareMatch-

Node

qualcommipq5010Match-

AND

qualcommipq5010_firmwareMatch-

Node

qualcommipq5018_firmwareMatch-

AND

qualcommipq5018Match-

Node

qualcommipq5028_firmwareMatch-

AND

qualcommipq5028Match-

Node

qualcommipq6000_firmwareMatch-

AND

qualcommipq6000Match-

Node

qualcommipq6005_firmwareMatch-

AND

qualcommipq6005Match-

Node

qualcommipq6010_firmwareMatch-

AND

qualcommipq6010Match-

Node

qualcommipq6018_firmwareMatch-

AND

qualcommipq6018Match-

Node

qualcommipq6028_firmwareMatch-

AND

qualcommipq6028Match-

Node

qualcommipq8064_firmwareMatch-

AND

qualcommipq8064Match-

Node

qualcommipq8069_firmwareMatch-

AND

qualcommipq8069Match-

Node

qualcommipq8070_firmwareMatch-

AND

qualcommipq8070Match-

Node

qualcommipq8070a_firmwareMatch-

AND

qualcommipq8070aMatch-

Node

qualcommipq8071_firmwareMatch-

AND

qualcommipq8071Match-

Node

qualcommipq8071a_firmwareMatch-

AND

qualcommipq8071aMatch-

Node

qualcommipq8072_firmwareMatch-

AND

qualcommipq8072Match-

Node

qualcommipq8072a_firmwareMatch-

AND

qualcommipq8072aMatch-

Node

qualcommipq8074_firmwareMatch-

AND

qualcommipq8074Match-

Node

qualcommipq8074a_firmwareMatch-

AND

qualcommipq8074aMatch-

Node

qualcommipq8076_firmwareMatch-

AND

qualcommipq8076Match-

Node

qualcommipq8076a_firmwareMatch-

AND

qualcommipq8076aMatch-

Node

qualcommipq8078_firmwareMatch-

AND

qualcommipq8078Match-

Node

qualcommipq8078a_firmwareMatch-

AND

qualcommipq8078aMatch-

Node

qualcommipq8173_firmwareMatch-

AND

qualcommipq8173Match-

Node

qualcommipq8174_firmwareMatch-

AND

qualcommipq8174Match-

Node

qualcommpmp8074_firmwareMatch-

AND

qualcommpmp8074Match-

Node

qualcommqca1062_firmwareMatch-

AND

qualcommqca1062Match-

Node

qualcommqca1064_firmwareMatch-

AND

qualcommqca1064Match-

Node

qualcommqca10901_firmwareMatch-

AND

qualcommqca10901Match-

Node

qualcommqca2062_firmwareMatch-

AND

qualcommqca2062Match-

Node

qualcommqca2064_firmwareMatch-

AND

qualcommqca2064Match-

Node

qualcommqca2065_firmwareMatch-

AND

qualcommqca2065Match-

Node

qualcommqca2066_firmwareMatch-

AND

qualcommqca2066Match-

Node

qualcommqca4024_firmwareMatch-

AND

qualcommqca4024Match-

Node

qualcommqca6310_firmwareMatch-

AND

qualcommqca6310Match-

Node

qualcommqca6335_firmwareMatch-

AND

qualcommqca6335Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6420_firmwareMatch-

AND

qualcommqca6420Match-

Node

qualcommqca6421_firmwareMatch-

AND

qualcommqca6421Match-

Node

qualcommqca6426_firmwareMatch-

AND

qualcommqca6426Match-

Node

qualcommqca6428_firmwareMatch-

AND

qualcommqca6428Match-

Node

qualcommqca6430_firmwareMatch-

AND

qualcommqca6430Match-

Node

qualcommqca6431_firmwareMatch-

AND

qualcommqca6431Match-

Node

qualcommqca6436_firmwareMatch-

AND

qualcommqca6436Match-

Node

qualcommqca6438_firmwareMatch-

AND

qualcommqca6438Match-

Node

qualcommqca8072_firmwareMatch-

AND

qualcommqca8072Match-

Node

qualcommqca8075_firmwareMatch-

AND

qualcommqca8075Match-

Node

qualcommqca8081_firmwareMatch-

AND

qualcommqca8081Match-

Node

qualcommqca8337_firmwareMatch-

AND

qualcommqca8337Match-

Node

qualcommqca9888_firmwareMatch-

AND

qualcommqca9888Match-

Node

qualcommqca9889_firmwareMatch-

AND

qualcommqca9889Match-

Node

qualcommqca9898_firmwareMatch-

AND

qualcommqca9898Match-

Node

qualcommqca9980_firmwareMatch-

AND

qualcommqca9980Match-

Node

qualcommqca9984_firmwareMatch-

AND

qualcommqca9984Match-

Node

qualcommqca9990_firmwareMatch-

AND

qualcommqca9990Match-

Node

qualcommqca9992_firmwareMatch-

AND

qualcommqca9992Match-

Node

qualcommqca9994_firmwareMatch-

AND

qualcommqca9994Match-

Node

qualcommqcm6490_firmwareMatch-

AND

qualcommqcm6490Match-

Node

qualcommqcn5021_firmwareMatch-

AND

qualcommqcn5021Match-

Node

qualcommqcn5022_firmwareMatch-

AND

qualcommqcn5022Match-

Node

qualcommqcn5024_firmwareMatch-

AND

qualcommqcn5024Match-

Node

qualcommqcn5052_firmwareMatch-

AND

qualcommqcn5052Match-

Node

qualcommqcn5054_firmwareMatch-

AND

qualcommqcn5054Match-

Node

qualcommqcn5064_firmwareMatch-

AND

qualcommqcn5064Match-

Node

qualcommqcn5121_firmwareMatch-

AND

qualcommqcn5121Match-

Node

qualcommqcn5122_firmwareMatch-

AND

qualcommqcn5122Match-

Node

qualcommqcn5124_firmwareMatch-

AND

qualcommqcn5124Match-

Node

qualcommqcn5152_firmwareMatch-

AND

qualcommqcn5152Match-

Node

qualcommqcn5154_firmwareMatch-

AND

qualcommqcn5154Match-

Node

qualcommqcn5164_firmwareMatch-

AND

qualcommqcn5164Match-

Node

qualcommqcn5550_firmwareMatch-

AND

qualcommqcn5550Match-

Node

qualcommqcn6023_firmwareMatch-

AND

qualcommqcn6023Match-

Node

qualcommqcn6024_firmwareMatch-

AND

qualcommqcn6024Match-

Node

qualcommqcn6122_firmwareMatch-

AND

qualcommqcn6122Match-

Node

qualcommqcn9000_firmwareMatch-

AND

qualcommqcn9000Match-

Node

qualcommqcn9012_firmwareMatch-

AND

qualcommqcn9012Match-

Node

qualcommqcn9022_firmwareMatch-

AND

qualcommqcn9022Match-

Node

qualcommqcn9024_firmwareMatch-

AND

qualcommqcn9024Match-

Node

qualcommqcn9070_firmwareMatch-

AND

qualcommqcn9070Match-

Node

qualcommqcn9072_firmwareMatch-

AND

qualcommqcn9072Match-

Node

qualcommqcn9074_firmwareMatch-

AND

qualcommqcn9074Match-

Node

qualcommqcn9100_firmwareMatch-

AND

qualcommqcn9100Match-

Node

qualcommqcs6490_firmwareMatch-

AND

qualcommqcs6490Match-

Node

qualcommqcx315_firmwareMatch-

AND

qualcommqcx315Match-

Node

qualcommqrb5165_firmwareMatch-

AND

qualcommqrb5165Match-

Node

qualcommqsm8350_firmwareMatch-

AND

qualcommqsm8350Match-

Node

qualcommsc8180x\+sdx55_firmwareMatch-

AND

qualcommsc8180x\+sdx55Match-

Node

qualcommsc8280xp_firmwareMatch-

AND

qualcommsc8280xpMatch-

Node

qualcommsd_8c_firmwareMatch-

AND

qualcommsd_8cMatch-

Node

qualcommsd_8cx_firmwareMatch-

AND

qualcommsd_8cxMatch-

Node

qualcommsd778g_firmwareMatch-

AND

qualcommsd778gMatch-

Node

qualcommsd780g_firmwareMatch-

AND

qualcommsd780gMatch-

Node

qualcommsd865_5g_firmwareMatch-

AND

qualcommsd865_5gMatch-

Node

qualcommsd870_firmwareMatch-

AND

qualcommsd870Match-

Node

qualcommsd888_firmwareMatch-

AND

qualcommsd888Match-

Node

qualcommsd888_5g_firmwareMatch-

AND

qualcommsd888_5gMatch-

Node

qualcommsdx55_firmwareMatch-

AND

qualcommsdx55Match-

Node

qualcommsdx55m_firmwareMatch-

AND

qualcommsdx55mMatch-

Node

qualcommsdxr2_5g_firmwareMatch-

AND

qualcommsdxr2_5gMatch-

Node

qualcommsm7325_firmwareMatch-

AND

qualcommsm7325Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6740_firmwareMatch-

AND

qualcommwcn6740Match-

Node

qualcommwcn6750_firmwareMatch-

AND

qualcommwcn6750Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwcn6855_firmwareMatch-

AND

qualcommwcn6855Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:aqt1000_firmwarequalcomm aqt1000 firmwareeq-

CPE	Name	Operator	Version
qualcomm:aqt1000_firmware	qualcomm aqt1000 firmware	eq	-

CNA Affected

[
  {
    "product": "Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AQT1000, AR8035, AR9380, CSR8811, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ5028, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, PMP8074, QCA1062, QCA1064, QCA10901, QCA2062, QCA2064, QCA2065, QCA2066, QCA4024, QCA6310, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6428, QCA6430, QCA6431, QCA6436, QCA6438, QCA8072, QCA8075, QCA8081, QCA8337, QCA9888, QCA9889, QCA9898, QCA9980, QCA9984, QCA9990, QCA9992, QCA9994, QCM6490, QCN5021, QCN5022, QCN5024, QCN5052, QCN5054, QCN5064, QCN5121, QCN5122, QCN5124, QCN5152, QCN5154, QCN5164, QCN5550, QCN6023, QCN6024, QCN6122, QCN9000, QCN9012, QCN9022, QCN9024, QCN9070, QCN9072, QCN9074, QCN9100, QCS6490, QCX315, QRB5165, QSM8350, SC8180X+SDX55, SC8280XP, SD 8C, SD 8CX, SD778G, SD780G, SD865 5G, SD870, SD888, SD888 5G, SDX55, SDX55M, SDXR2 5G, SM7315, SM7325P, WCD9340, WCD9341, WCD9370, WCD9375, ...[truncated*]"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.8%

JSON

Related for CVE-2021-30302

cvelist1 nvd1 prion1