Lucene search

QualcommCVE-2021-35123

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2021-35123

2022-06-1410:15:17

qualcomm

web.nvd.nist.gov

cve-2021-35123

gatt

notification

snapdragon connectivity

snapdragon industrial iot

nvd

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

26.4%

JSON

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT

Affected configurations

Nvd

Node

qualcommaqt1000_firmwareMatch-

AND

qualcommaqt1000Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommsd_8_gen1_5g_firmwareMatch-

AND

qualcommsm8475Match-

Node

qualcommsd480_firmwareMatch-

AND

qualcommsd480Match-

Node

qualcommsd660_firmwareMatch-

AND

qualcommsd660Match-

Node

qualcommsd778g_firmwareMatch-

AND

qualcommsd778gMatch-

Node

qualcommsd780g_firmwareMatch-

AND

qualcommsd780gMatch-

Node

qualcommsd855_firmwareMatch-

AND

qualcommsd855Match-

Node

qualcommsd865_5g_firmwareMatch-

AND

qualcommsd865_5gMatch-

Node

qualcommsd870_firmwareMatch-

AND

qualcommsd870Match-

Node

qualcommsd888_5g_firmwareMatch-

AND

qualcommsd888_5gMatch-

Node

qualcommsdx55m_firmwareMatch-

AND

qualcommsdx55mMatch-

Node

qualcommsm6375_firmwareMatch-

AND

qualcommsm6375Match-

Node

qualcommsm7325p_firmwareMatch-

AND

qualcommsm7325pMatch-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3991_firmwareMatch-

AND

qualcommwcn3991Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6740_firmwareMatch-

AND

qualcommwcn6740Match-

Node

qualcommwcn6750_firmwareMatch-

AND

qualcommwcn6750Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwcn6855_firmwareMatch-

AND

qualcommwcn6855Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

VendorProductVersionCPE
qualcommaqt1000_firmware-cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
qualcommaqt1000-cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*
qualcommqca6390_firmware-cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
qualcommqca6390-cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*
qualcommqca6391_firmware-cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
qualcommqca6391-cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*
qualcommsd_8_gen1_5g_firmware-cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*
qualcommsm8475-cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*
qualcommsd480_firmware-cpe:2.3:o:qualcomm:sd480_firmware:-:*:*:*:*:*:*:*
qualcommsd480-cpe:2.3:h:qualcomm:sd480:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	aqt1000_firmware	-	cpe:2.3:o:qualcomm:aqt1000_firmware:-:::::::*
qualcomm	aqt1000	-	cpe:2.3:h:qualcomm:aqt1000:-:::::::*
qualcomm	qca6390_firmware	-	cpe:2.3:o:qualcomm:qca6390_firmware:-:::::::*
qualcomm	qca6390	-	cpe:2.3:h:qualcomm:qca6390:-:::::::*
qualcomm	qca6391_firmware	-	cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*
qualcomm	qca6391	-	cpe:2.3:h:qualcomm:qca6391:-:::::::*
qualcomm	sd_8_gen1_5g_firmware	-	cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:::::::*
qualcomm	sm8475	-	cpe:2.3:h:qualcomm:sm8475:-:::::::*
qualcomm	sd480_firmware	-	cpe:2.3:o:qualcomm:sd480_firmware:-:::::::*
qualcomm	sd480	-	cpe:2.3:h:qualcomm:sd480:-:::::::*

Rows per page:

1-10 of 641

CNA Affected

[
  {
    "product": "Snapdragon Connectivity, Snapdragon Industrial IOT",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AQT1000, QCA6390, QCA6391, SD 8 Gen1 5G, SD480, SD660, SD778G, SD780G, SD855, SD865 5G, SD870, SD888 5G, SDX55M, SM6375, SM7325P, WCD9335, WCD9370, WCD9375, WCD9380, WCD9385, WCN3980, WCN3988, WCN3991, WCN3998, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WSA8830, WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

Social References

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

26.4%

JSON

Related for CVE-2021-35123