Lucene search

[email protected]NVD:CVE-2021-35123

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2021-35123

2022-06-1410:15:17

[email protected]

web.nvd.nist.gov

cve-2021-35123

gatt multi notification

improper length check

snapdragon connectivity

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

26.4%

JSON

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT

Affected configurations

Nvd

Node

qualcommaqt1000_firmwareMatch-

AND

qualcommaqt1000Match-

Node

qualcommqca6390_firmwareMatch-

AND

qualcommqca6390Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommsd_8_gen1_5g_firmwareMatch-

AND

qualcommsm8475Match-

Node

qualcommsd480_firmwareMatch-

AND

qualcommsd480Match-

Node

qualcommsd660_firmwareMatch-

AND

qualcommsd660Match-

Node

qualcommsd778g_firmwareMatch-

AND

qualcommsd778gMatch-

Node

qualcommsd780g_firmwareMatch-

AND

qualcommsd780gMatch-

Node

qualcommsd855_firmwareMatch-

AND

qualcommsd855Match-

Node

qualcommsd865_5g_firmwareMatch-

AND

qualcommsd865_5gMatch-

Node

qualcommsd870_firmwareMatch-

AND

qualcommsd870Match-

Node

qualcommsd888_5g_firmwareMatch-

AND

qualcommsd888_5gMatch-

Node

qualcommsdx55m_firmwareMatch-

AND

qualcommsdx55mMatch-

Node

qualcommsm6375_firmwareMatch-

AND

qualcommsm6375Match-

Node

qualcommsm7325p_firmwareMatch-

AND

qualcommsm7325pMatch-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn3991_firmwareMatch-

AND

qualcommwcn3991Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6740_firmwareMatch-

AND

qualcommwcn6740Match-

Node

qualcommwcn6750_firmwareMatch-

AND

qualcommwcn6750Match-

Node

qualcommwcn6850_firmwareMatch-

AND

qualcommwcn6850Match-

Node

qualcommwcn6851_firmwareMatch-

AND

qualcommwcn6851Match-

Node

qualcommwcn6855_firmwareMatch-

AND

qualcommwcn6855Match-

Node

qualcommwcn6856_firmwareMatch-

AND

qualcommwcn6856Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

VendorProductVersionCPE
qualcommaqt1000_firmware-cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
qualcommaqt1000-cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*
qualcommqca6390_firmware-cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
qualcommqca6390-cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*
qualcommqca6391_firmware-cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
qualcommqca6391-cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*
qualcommsd_8_gen1_5g_firmware-cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*
qualcommsm8475-cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*
qualcommsd480_firmware-cpe:2.3:o:qualcomm:sd480_firmware:-:*:*:*:*:*:*:*
qualcommsd480-cpe:2.3:h:qualcomm:sd480:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	aqt1000_firmware	-	cpe:2.3:o:qualcomm:aqt1000_firmware:-:::::::*
qualcomm	aqt1000	-	cpe:2.3:h:qualcomm:aqt1000:-:::::::*
qualcomm	qca6390_firmware	-	cpe:2.3:o:qualcomm:qca6390_firmware:-:::::::*
qualcomm	qca6390	-	cpe:2.3:h:qualcomm:qca6390:-:::::::*
qualcomm	qca6391_firmware	-	cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*
qualcomm	qca6391	-	cpe:2.3:h:qualcomm:qca6391:-:::::::*
qualcomm	sd_8_gen1_5g_firmware	-	cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:::::::*
qualcomm	sm8475	-	cpe:2.3:h:qualcomm:sm8475:-:::::::*
qualcomm	sd480_firmware	-	cpe:2.3:o:qualcomm:sd480_firmware:-:::::::*
qualcomm	sd480	-	cpe:2.3:h:qualcomm:sd480:-:::::::*

Rows per page:

1-10 of 641

References

www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

26.4%

JSON

Related for NVD:CVE-2021-35123

cvelist1 prion1 cve1