Lucene search

[email protected]CVE-2021-35070

HistoryJun 14, 2022 - 10:15 a.m.

CVE-2021-35070

2022-06-1410:15:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2021-35070

rpm secure stream

smmu configuration

information disclosure

snapdragon industrial iot

snapdragon mobile

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

11.7%

JSON

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile

CPENameOperatorVersion
qualcomm:qcm6125_firmwarequalcomm qcm6125 firmwareeq-
qualcomm:qcs6125_firmwarequalcomm qcs6125 firmwareeq-
qualcomm:sd665_firmwarequalcomm sd665 firmwareeq-
qualcomm:wcd9370_firmwarequalcomm wcd9370 firmwareeq-
qualcomm:wcd9375_firmwarequalcomm wcd9375 firmwareeq-
qualcomm:wcn3950_firmwarequalcomm wcn3950 firmwareeq-
qualcomm:wcn3980_firmwarequalcomm wcn3980 firmwareeq-
qualcomm:wsa8810_firmwarequalcomm wsa8810 firmwareeq-
qualcomm:wsa8815_firmwarequalcomm wsa8815 firmwareeq-

CPE	Name	Operator	Version
qualcomm:qcm6125_firmware	qualcomm qcm6125 firmware	eq	-
qualcomm:qcs6125_firmware	qualcomm qcs6125 firmware	eq	-
qualcomm:sd665_firmware	qualcomm sd665 firmware	eq	-
qualcomm:wcd9370_firmware	qualcomm wcd9370 firmware	eq	-
qualcomm:wcd9375_firmware	qualcomm wcd9375 firmware	eq	-
qualcomm:wcn3950_firmware	qualcomm wcn3950 firmware	eq	-
qualcomm:wcn3980_firmware	qualcomm wcn3980 firmware	eq	-
qualcomm:wsa8810_firmware	qualcomm wsa8810 firmware	eq	-
qualcomm:wsa8815_firmware	qualcomm wsa8815 firmware	eq	-

References

www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

Social References

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

11.7%

JSON

Related for CVE-2021-35070

prion1