CISA Adds Four Known Exploited Vulnerabilities to Catalog

🗓️ 05 Dec 2023 12:00:00Reported by CISAType

cisa

cisa🔗 www.cisa.gov👁 20 Views

CISA added four Qualcomm vulnerabilities to its catalog, posing risks to federal networks.

Reporter	Title	Published	Views	Family All 63
ATTACKERKB	CVE-2022-22071	14 Jun 202200:00	–	attackerkb
ATTACKERKB	CVE-2023-33107	5 Dec 202300:00	–	attackerkb
ATTACKERKB	CVE-2023-33106	5 Dec 202300:00	–	attackerkb
ATTACKERKB	CVE-2023-33063	5 Dec 202300:00	–	attackerkb
Android Security Bulletins	Android Security Bulletin—December 2023Stay organized with collectionsSave and categorize content based on your preferences.	4 Dec 202300:00	–	androidsecurity
BDU FSTEC	The vulnerability of embedded software in Qualcomm products is caused by a situation where hackers can influence the privacy, integrity, and accessibility of protected information.	5 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogramming software in embedded Qualcomm chips allows a hacker to execute arbitrary code with elevated privileges.	5 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Graphics component in Linux microsoftware in embedded Qualcomm chips allows a hacker to execute arbitrary code with elevated privileges.	10 Apr 202400:00	–	bdu_fstec
Circl	CVE-2022-22071	4 Oct 202310:12	–	circl
Circl	CVE-2023-33063	4 Oct 202313:13	–	circl

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-33106
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-33063
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-33107
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-22071
cisa	www.cisa.gov/binding-operational-directive-22-01
cisa	www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/known-exploited-vulnerabilities

05 Dec 2023 12:00Current

7.4High risk

Vulners AI Score7.4

CVSS 27.2

CVSS 3.17.8 - 8.4

EPSS0.00892

SSVC

cisa known exploited vulnerabilities qualcomm chipsets cybersecurity risks federal agencies