Lucene search

[email protected]CVE-2022-25691

HistoryDec 13, 2022 - 4:15 p.m.

CVE-2022-25691

2022-12-1316:15:18

CWE-617

[email protected]

web.nvd.nist.gov

cve-2022-25691

denial of service

modem

sib1

snapdragon mobile

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

36.9%

JSON

Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile

Affected configurations

NVD

Node

qualcommar8035Match-

AND

qualcommar8035_firmwareMatch-

Node

qualcommqca8081Match-

AND

qualcommqca8081_firmwareMatch-

Node

qualcommqca8337Match-

AND

qualcommqca8337_firmwareMatch-

Node

qualcommqcn6024Match-

AND

qualcommqcn6024_firmwareMatch-

Node

qualcommqcn9024Match-

AND

qualcommqcn9024_firmwareMatch-

Node

qualcommsm8475Match-

AND

qualcommsd_8_gen1_5g_firmwareMatch-

Node

qualcommsd480Match-

AND

qualcommsd480_firmwareMatch-

Node

qualcommsd695Match-

AND

qualcommsd695_firmwareMatch-

Node

qualcommsdx65Match-

AND

qualcommsdx65_firmwareMatch-

Node

qualcommsm4375Match-

AND

qualcommsm4375_firmwareMatch-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6855_firmwareMatch-

AND

qualcommwcn6855Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwcn7850_firmwareMatch-

AND

qualcommwcn7850Match-

Node

qualcommwcn7851_firmwareMatch-

AND

qualcommwcn7851Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:ar8035_firmwarequalcomm ar8035 firmwareeq-

CPE	Name	Operator	Version
qualcomm:ar8035_firmware	qualcomm ar8035 firmware	eq	-

CNA Affected

[
  {
    "vendor": "Qualcomm, Inc.",
    "product": "Snapdragon Mobile",
    "versions": [
      {
        "version": "AR8035",
        "status": "affected"
      },
      {
        "version": "QCA8081",
        "status": "affected"
      },
      {
        "version": "QCA8337",
        "status": "affected"
      },
      {
        "version": "QCN6024",
        "status": "affected"
      },
      {
        "version": "QCN9024",
        "status": "affected"
      },
      {
        "version": "SD 8 Gen1 5G",
        "status": "affected"
      },
      {
        "version": "SD480",
        "status": "affected"
      },
      {
        "version": "SD695",
        "status": "affected"
      },
      {
        "version": "SDX65",
        "status": "affected"
      },
      {
        "version": "SM4375",
        "status": "affected"
      },
      {
        "version": "WCD9370",
        "status": "affected"
      },
      {
        "version": "WCD9375",
        "status": "affected"
      },
      {
        "version": "WCD9380",
        "status": "affected"
      },
      {
        "version": "WCD9385",
        "status": "affected"
      },
      {
        "version": "WCN3988",
        "status": "affected"
      },
      {
        "version": "WCN3998",
        "status": "affected"
      },
      {
        "version": "WCN6855",
        "status": "affected"
      },
      {
        "version": "WCN6856",
        "status": "affected"
      },
      {
        "version": "WCN7850",
        "status": "affected"
      },
      {
        "version": "WCN7851",
        "status": "affected"
      },
      {
        "version": "WSA8810",
        "status": "affected"
      },
      {
        "version": "WSA8815",
        "status": "affected"
      },
      {
        "version": "WSA8830",
        "status": "affected"
      },
      {
        "version": "WSA8835",
        "status": "affected"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

36.9%

JSON

Related for CVE-2022-25691

cvelist1 prion1 nvd1