Lucene search

[email protected]NVD:CVE-2021-1896

HistoryJul 13, 2021 - 6:15 a.m.

CVE-2021-1896

2021-07-1306:15:08

CWE-319

[email protected]

web.nvd.nist.gov

weak configuration

wlan

unencrypted packets

snapdragon compute

snapdragon connectivity

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

25.0%

JSON

Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity

Affected configurations

Nvd

Node

qualcommaqt1000_firmwareMatch-

AND

qualcommaqt1000Match-

Node

qualcommqca6164_firmwareMatch-

AND

qualcommqca6164Match-

Node

qualcommqca6174_firmwareMatch-

AND

qualcommqca6174Match-

Node

qualcommqca6174a_firmwareMatch-

AND

qualcommqca6174aMatch-

Node

qualcommqca6420_firmwareMatch-

AND

qualcommqca6420Match-

Node

qualcommqca6430_firmwareMatch-

AND

qualcommqca6430Match-

Node

qualcommqca9377_firmwareMatch-

AND

qualcommqca9377Match-

Node

qualcommsc8180x_firmwareMatch-

AND

qualcommsc8180xMatch-

Node

qualcommsd_8c_firmwareMatch-

AND

qualcommsd_8cMatch-

Node

qualcommsd_8cxMatch-

AND

qualcommsd_8cx_firmwareMatch-

Node

qualcommsd7cMatch-

AND

qualcommsd7c_firmwareMatch-

Node

qualcommsd850Match-

AND

qualcommsd850_firmwareMatch-

Node

qualcommsm6250Match-

AND

qualcommsm6250_firmwareMatch-

Node

qualcommwcd9340Match-

AND

qualcommwcd9340_firmwareMatch-

Node

qualcommwcd9341Match-

AND

qualcommwcd9341_firmwareMatch-

Node

qualcommwcn3990Match-

AND

qualcommwcn3990_firmwareMatch-

Node

qualcommwcn3991Match-

AND

qualcommwcn3991_firmwareMatch-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommsdx55_firmwareMatch-

AND

qualcommsdx55Match-

VendorProductVersionCPE
qualcommaqt1000_firmware-cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
qualcommaqt1000-cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*
qualcommqca6164_firmware-cpe:2.3:o:qualcomm:qca6164_firmware:-:*:*:*:*:*:*:*
qualcommqca6164-cpe:2.3:h:qualcomm:qca6164:-:*:*:*:*:*:*:*
qualcommqca6174_firmware-cpe:2.3:o:qualcomm:qca6174_firmware:-:*:*:*:*:*:*:*
qualcommqca6174-cpe:2.3:h:qualcomm:qca6174:-:*:*:*:*:*:*:*
qualcommqca6174a_firmware-cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
qualcommqca6174a-cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*
qualcommqca6420_firmware-cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
qualcommqca6420-cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	aqt1000_firmware	-	cpe:2.3:o:qualcomm:aqt1000_firmware:-:::::::*
qualcomm	aqt1000	-	cpe:2.3:h:qualcomm:aqt1000:-:::::::*
qualcomm	qca6164_firmware	-	cpe:2.3:o:qualcomm:qca6164_firmware:-:::::::*
qualcomm	qca6164	-	cpe:2.3:h:qualcomm:qca6164:-:::::::*
qualcomm	qca6174_firmware	-	cpe:2.3:o:qualcomm:qca6174_firmware:-:::::::*
qualcomm	qca6174	-	cpe:2.3:h:qualcomm:qca6174:-:::::::*
qualcomm	qca6174a_firmware	-	cpe:2.3:o:qualcomm:qca6174a_firmware:-:::::::*
qualcomm	qca6174a	-	cpe:2.3:h:qualcomm:qca6174a:-:::::::*
qualcomm	qca6420_firmware	-	cpe:2.3:o:qualcomm:qca6420_firmware:-:::::::*
qualcomm	qca6420	-	cpe:2.3:h:qualcomm:qca6420:-:::::::*

Rows per page:

1-10 of 441

References

www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

25.0%

JSON

Related for NVD:CVE-2021-1896

cvelist1 cve1 prion1