Lucene search

[email protected]CVE-2023-28562

HistorySep 05, 2023 - 7:15 a.m.

CVE-2023-28562

2023-09-0507:15:13

CWE-120

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-28562

memory corruption

remote esl

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

JSON

Memory corruption while handling payloads from remote ESL.

Affected configurations

NVD

Node

qualcommaqt1000_firmwareMatch-

AND

qualcommaqt1000Match-

Node

qualcommfastconnect_6200_firmwareMatch-

AND

qualcommfastconnect_6200Match-

Node

qualcommfastconnect_6800_firmwareMatch-

AND

qualcommfastconnect_6800Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6420_firmwareMatch-

AND

qualcommqca6420Match-

Node

qualcommqca6430_firmwareMatch-

AND

qualcommqca6430Match-

Node

qualcommqcn7606_firmwareMatch-

AND

qualcommqcn7606Match-

Node

qualcommqcs410_firmwareMatch-

AND

qualcommqcs410Match-

Node

qualcommqcs610_firmwareMatch-

AND

qualcommqcs610Match-

Node

qualcommsc8180x\+sdx55_firmwareMatch-

AND

qualcommsc8180x\+sdx55Match-

Node

qualcommsd460_firmwareMatch-

AND

qualcommsd460Match-

Node

qualcommsd662_firmwareMatch-

AND

qualcommsd662Match-

Node

qualcommsd730_firmwareMatch-

AND

qualcommsd730Match-

Node

qualcommsd855_firmwareMatch-

AND

qualcommsd855Match-

Node

qualcommsdx55_firmwareMatch-

AND

qualcommsdx55Match-

Node

qualcommsm4125_firmwareMatch-

AND

qualcommsm4125Match-

Node

qualcommsm6250_firmwareMatch-

AND

qualcommsm6250Match-

Node

qualcommsm6250p_firmwareMatch-

AND

qualcommsm6250pMatch-

Node

qualcommsm7250p_firmwareMatch-

AND

qualcommsm7250pMatch-

Node

qualcommsnapdragon_460_firmwareMatch-

AND

qualcommsnapdragon_460Match-

Node

qualcommsnapdragon_480_5g_firmwareMatch-

AND

qualcommsnapdragon_480_5gMatch-

Node

qualcommsnapdragon_480\+_5g_firmwareMatch-

AND

qualcommsnapdragon_480\+_5gMatch-

Node

qualcommsnapdragon_662_firmwareMatch-

AND

qualcommsnapdragon_662Match-

Node

qualcommsnapdragon_675_firmwareMatch-

AND

qualcommsnapdragon_675Match-

Node

qualcommsnapdragon_678_firmwareMatch-

AND

qualcommsnapdragon_678Match-

Node

qualcommsnapdragon_690_5g_firmwareMatch-

AND

qualcommsnapdragon_690_5gMatch-

Node

qualcommsnapdragon_695_5g_firmwareMatch-

AND

qualcommsnapdragon_695_5gMatch-

Node

qualcommsnapdragon_720g_firmwareMatch-

AND

qualcommsnapdragon_720gMatch-

Node

qualcommsnapdragon_730_firmwareMatch-

AND

qualcommsnapdragon_730Match-

Node

qualcommsnapdragon_730g_firmwareMatch-

AND

qualcommsnapdragon_730gMatch-

Node

qualcommsnapdragon_732g_firmwareMatch-

AND

qualcommsnapdragon_732gMatch-

Node

qualcommsnapdragon_750g_5g_firmwareMatch-

AND

qualcommsnapdragon_750g_5gMatch-

Node

qualcommsnapdragon_765_5g_firmwareMatch-

AND

qualcommsnapdragon_765_5gMatch-

Node

qualcommsnapdragon_765g_5g_firmwareMatch-

AND

qualcommsnapdragon_765g_5gMatch-

Node

qualcommsnapdragon_768g_5g_firmwareMatch-

AND

qualcommsnapdragon_768g_5gMatch-

Node

qualcommsnapdragon_855_firmwareMatch-

AND

qualcommsnapdragon_855Match-

Node

qualcommsnapdragon_855\+_firmwareMatch-

AND

qualcommsnapdragon_855\+Match-

Node

qualcommsnapdragon_860_firmwareMatch-

AND

qualcommsnapdragon_860Match-

Node

qualcommsc8180x-ad_firmwareMatch-

AND

qualcommsc8180x-adMatch-

Node

qualcommsc8180xp-ad_firmwareMatch-

AND

qualcommsc8180xp-adMatch-

Node

qualcommsc8180x-aa_firmwareMatch-

AND

qualcommsc8180x-aaMatch-

Node

qualcommsc8180x-ab_firmwareMatch-

AND

qualcommsc8180x-abMatch-

Node

qualcommsc8180xp-ac_firmwareMatch-

AND

qualcommsc8180xp-acMatch-

Node

qualcommsc8180xp-af_firmwareMatch-

AND

qualcommsc8180xp-afMatch-

Node

qualcommsc8180x-ac_firmwareMatch-

AND

qualcommsc8180x-acMatch-

Node

qualcommsc8180x-af_firmwareMatch-

AND

qualcommsc8180x-afMatch-

Node

qualcommsc8180xp-aa_firmwareMatch-

AND

qualcommsc8180xp-aaMatch-

Node

qualcommsc8180xp-ab_firmwareMatch-

AND

qualcommsc8180xp-abMatch-

Node

qualcommsnapdragon_x50_5g_firmwareMatch-

AND

qualcommsnapdragon_x50_5gMatch-

Node

qualcommsnapdragon_x55_5g_firmwareMatch-

AND

qualcommsnapdragon_x55_5gMatch-

Node

qualcommvision_intelligence_400_firmwareMatch-

AND

qualcommvision_intelligence_400Match-

Node

qualcommwcd9326_firmwareMatch-

AND

qualcommwcd9326Match-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcd9340_firmwareMatch-

AND

qualcommwcd9340Match-

Node

qualcommwcd9341_firmwareMatch-

AND

qualcommwcd9341Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3910_firmwareMatch-

AND

qualcommwcn3910Match-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3990_firmwareMatch-

AND

qualcommwcn3990Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:aqt1000_firmwarequalcomm aqt1000 firmwareeq-

CPE	Name	Operator	Version
qualcomm:aqt1000_firmware	qualcomm aqt1000 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Compute",
      "Snapdragon Consumer IOT",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AQT1000"
      },
      {
        "status": "affected",
        "version": "FastConnect 6200"
      },
      {
        "status": "affected",
        "version": "FastConnect 6800"
      },
      {
        "status": "affected",
        "version": "QCA6391"
      },
      {
        "status": "affected",
        "version": "QCA6420"
      },
      {
        "status": "affected",
        "version": "QCA6430"
      },
      {
        "status": "affected",
        "version": "QCN7606"
      },
      {
        "status": "affected",
        "version": "QCS410"
      },
      {
        "status": "affected",
        "version": "QCS610"
      },
      {
        "status": "affected",
        "version": "SC8180X+SDX55"
      },
      {
        "status": "affected",
        "version": "SD460"
      },
      {
        "status": "affected",
        "version": "SD662"
      },
      {
        "status": "affected",
        "version": "SD730"
      },
      {
        "status": "affected",
        "version": "SD855"
      },
      {
        "status": "affected",
        "version": "SDX55"
      },
      {
        "status": "affected",
        "version": "SM4125"
      },
      {
        "status": "affected",
        "version": "SM6250"
      },
      {
        "status": "affected",
        "version": "SM6250P"
      },
      {
        "status": "affected",
        "version": "SM7250P"
      },
      {
        "status": "affected",
        "version": "Snapdragon 460 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 480 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 662 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 675 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 678 Mobile Platform (SM6150-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 690 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 695 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 720G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 730 Mobile Platform (SM7150-AA)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 730G Mobile Platform (SM7150-AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 732G Mobile Platform (SM7150-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 750G 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 855 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8c Compute Platform (SC8180X-AD) \"Poipu Lite\""
      },
      {
        "status": "affected",
        "version": "Snapdragon 8c Compute Platform (SC8180XP-AD) \"Poipu Lite\""
      },
      {
        "status": "affected",
        "version": "Snapdragon 8cx Compute Platform (SC8180X-AA, AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) \"Poipu Pro\""
      },
      {
        "status": "affected",
        "version": "Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) \"Poipu Pro\""
      },
      {
        "status": "affected",
        "version": "Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon X50 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon X55 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Vision Intelligence 400 Platform"
      },
      {
        "status": "affected",
        "version": "WCD9326"
      },
      {
        "status": "affected",
        "version": "WCD9335"
      },
      {
        "status": "affected",
        "version": "WCD9340"
      },
      {
        "status": "affected",
        "version": "WCD9341"
      },
      {
        "status": "affected",
        "version": "WCD9370"
      },
      {
        "status": "affected",
        "version": "WCD9375"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCN3910"
      },
      {
        "status": "affected",
        "version": "WCN3950"
      },
      {
        "status": "affected",
        "version": "WCN3980"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WCN3990"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.3%

JSON

Related for CVE-2023-28562

prion1 nvd1 cvelist1