CVE-2017-18160

🗓️ 18 Jan 2019 22:00:00Reported by qualcommType

AGPS session failure in GNSS module due to cyphersuites are hardcoded in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 85

Reporter	Title	Published	Views	Family All 5
Circl	CVE-2017-18160	21 Jan 201904:09	–	circl
Cvelist	CVE-2017-18160	18 Jan 201922:00	–	cvelist
EUVD	EUVD-2017-9295	7 Oct 202500:30	–	euvd
NVD	CVE-2017-18160	18 Jan 201922:29	–	nvd
Prion	Hardcoded credentials	18 Jan 201922:29	–	prion

NVD

Node

qualcomm mdm9635m_firmwareMatch-

AND

qualcomm mdm9635mMatch-

Node

qualcomm mdm9645_firmwareMatch-

AND

qualcomm mdm9645Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm mdm9655_firmwareMatch-

AND

qualcomm mdm9655Match-

Node

qualcomm msm8909w_firmwareMatch-

AND

qualcomm msm8909wMatch-

Node

qualcomm sd_835_firmwareMatch-

AND

qualcomm sd_835Match-

Node

qualcomm sd_845_firmwareMatch-

AND

qualcomm sd_845Match-

Node

qualcomm sd_850_firmwareMatch-

AND

qualcomm sd_850Match-

[
  {
    "product": "Snapdragon Mobile, Snapdragon Wear",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins
securityfocus	www.securityfocus.com/bid/106128

21 Nov 2024 03:19Current

8.1High risk

Vulners AI Score8.1

CVSS 39.8

CVSS 210

EPSS0.00217

CWE-310