Lucene search

[email protected]CVE-2022-25672

HistoryDec 13, 2022 - 4:15 p.m.

CVE-2022-25672

2022-12-1316:15:00

CWE-617

[email protected]

web.nvd.nist.gov

cve-2022-25672

denial of service

modem

snapdragon mobile

sib1

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

32.7%

JSON

Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile

CPENameOperatorVersion
qualcomm:ar8035_firmwarequalcomm ar8035 firmwareeq-
qualcomm:qca8081_firmwarequalcomm qca8081 firmwareeq-
qualcomm:qca8337_firmwarequalcomm qca8337 firmwareeq-
qualcomm:qcn6024_firmwarequalcomm qcn6024 firmwareeq-
qualcomm:qcn9024_firmwarequalcomm qcn9024 firmwareeq-
qualcomm:sd_8_gen1_5g_firmwarequalcomm sd 8 gen1 5g firmwareeq-
qualcomm:sd480_firmwarequalcomm sd480 firmwareeq-
qualcomm:sd695_firmwarequalcomm sd695 firmwareeq-
qualcomm:sdx65_firmwarequalcomm sdx65 firmwareeq-
qualcomm:sm4375_firmwarequalcomm sm4375 firmwareeq-

CPE	Name	Operator	Version
qualcomm:ar8035_firmware	qualcomm ar8035 firmware	eq	-
qualcomm:qca8081_firmware	qualcomm qca8081 firmware	eq	-
qualcomm:qca8337_firmware	qualcomm qca8337 firmware	eq	-
qualcomm:qcn6024_firmware	qualcomm qcn6024 firmware	eq	-
qualcomm:qcn9024_firmware	qualcomm qcn9024 firmware	eq	-
qualcomm:sd_8_gen1_5g_firmware	qualcomm sd 8 gen1 5g firmware	eq	-
qualcomm:sd480_firmware	qualcomm sd480 firmware	eq	-
qualcomm:sd695_firmware	qualcomm sd695 firmware	eq	-
qualcomm:sdx65_firmware	qualcomm sdx65 firmware	eq	-
qualcomm:sm4375_firmware	qualcomm sm4375 firmware	eq	-

Rows per page:

1-10 of 241

References

www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

32.7%

JSON

Related for CVE-2022-25672

prion1