CVE-2019-2289

🗓️ 21 Nov 2019 14:38:22Reported by qualcommType

Lack of integrity check allows MODEM to accept any NAS messages in Snapdragon devices, leading to NAS authentication bypass

Reporter	Title	Published	Views	Family All 7
Android Security Bulletins	Android Security Bulletin—October 2019Stay organized with collectionsSave and categorize content based on your preferences.	7 Oct 201900:00	–	androidsecurity
Circl	CVE-2019-2289	8 Jan 202418:16	–	circl
Cvelist	CVE-2019-2289	21 Nov 201914:38	–	cvelist
EUVD	EUVD-2019-11931	7 Oct 202500:30	–	euvd
NVD	CVE-2019-2289	21 Nov 201915:15	–	nvd
Prion	Authentication flaw	21 Nov 201915:15	–	prion
RedhatCVE	CVE-2019-2289	9 Jan 202610:15	–	redhatcve

NVD

Node

qualcomm apq8009_firmwareMatch-

AND

qualcomm apq8009Match-

Node

qualcomm apq8017_firmwareMatch-

AND

qualcomm apq8017Match-

Node

qualcomm apq8053_firmwareMatch-

AND

qualcomm apq8053Match-

Node

qualcomm apq8096au_firmwareMatch-

AND

qualcomm apq8096auMatch-

Node

qualcomm apq8098_firmwareMatch-

AND

qualcomm apq8098Match-

Node

qualcomm mdm915_firmwareMatch-

AND

qualcomm mdm915Match-

Node

qualcomm mdm9205_firmwareMatch-

AND

qualcomm mdm9205Match-

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm mdm9615_firmwareMatch-

AND

qualcomm mdm9615Match-

Node

qualcomm mdm9625_firmwareMatch-

AND

qualcomm mdm9625Match-

Node

qualcomm mdm9635m_firmwareMatch-

AND

qualcomm mdm9635mMatch-

Node

qualcomm mdm9640_firmwareMatch-

AND

qualcomm mdm9640Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm mdm9655_firmwareMatch-

AND

qualcomm mdm9655Match-

Node

qualcomm msm8905_firmwareMatch-

AND

qualcomm msm8905Match-

Node

qualcomm msm8909_firmwareMatch-

AND

qualcomm msm8909Match-

Node

qualcomm msm8909w_firmwareMatch-

AND

qualcomm msm8909wMatch-

Node

qualcomm msm8917_firmwareMatch-

AND

qualcomm msm8917Match-

Node

qualcomm msm8920_firmwareMatch-

AND

qualcomm msm8920Match-

Node

qualcomm msm8937_firmwareMatch-

AND

qualcomm msm8937Match-

Node

qualcomm msm8940_firmwareMatch-

AND

qualcomm msm8940Match-

Node

qualcomm msm8953_firmwareMatch-

AND

qualcomm msm8953Match-

Node

qualcomm msm8976_firmwareMatch-

AND

qualcomm msm8976Match-

Node

qualcomm msm8996au_firmwareMatch-

AND

qualcomm msm8996auMatch-

Node

qualcomm msm8998_firmwareMatch-

AND

qualcomm msm8998Match-

Node

qualcomm qcm2150_firmwareMatch-

AND

qualcomm qcm2150Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm qm215_firmwareMatch-

AND

qualcomm qm215Match-

Node

qualcomm sc8180x_firmwareMatch-

AND

qualcomm sc8180xMatch-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

Node

qualcomm sda845_firmwareMatch-

AND

qualcomm sda845Match-

Node

qualcomm sdm429_firmwareMatch-

AND

qualcomm sdm429Match-

Node

qualcomm sdm439_firmwareMatch-

AND

qualcomm sdm439Match-

Node

qualcomm sdm450_firmwareMatch-

AND

qualcomm sdm450Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm632_firmwareMatch-

AND

qualcomm sdm632Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdm670_firmwareMatch-

AND

qualcomm sdm670Match-

Node

qualcomm sdm710_firmwareMatch-

AND

qualcomm sdm710Match-

Node

qualcomm sdm845_firmwareMatch-

AND

qualcomm sdm845Match-

Node

qualcomm sdm850_firmwareMatch-

AND

qualcomm sdm850Match-

Node

qualcomm sdx20_firmwareMatch-

AND

qualcomm sdx20Match-

Node

qualcomm sdx55_firmwareMatch-

AND

qualcomm sdx55Match-

Node

qualcomm sm6150_firmwareMatch-

AND

qualcomm sm6150Match-

Node

qualcomm sm7150_firmwareMatch-

AND

qualcomm sm7150Match-

Node

qualcomm sm8150_firmwareMatch-

AND

qualcomm sm8150Match-

Node

qualcomm sm8250_firmwareMatch-

AND

qualcomm sm8250Match-

Node

qualcomm snapdragon_high_med_2016_firmwareMatch-

AND

qualcomm snapdragon_high_med_2016Match-

Node

qualcomm sxr1130_firmwareMatch-

AND

qualcomm sxr1130Match-

Node

qualcomm sxr2130_firmwareMatch-

AND

qualcomm sxr2130Match-

Node

qualcomm nicobar_firmwareMatch-

AND

qualcomm nicobarMatch-

Node

qualcomm msm8939_firmwareMatch-

AND

qualcomm msm8939Match-

Node

qualcomm sdx24_firmwareMatch-

AND

qualcomm sdx24Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

21 Nov 2024 04:40Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8

CVSS 210

EPSS0.00054

CWE-345