Lucene search

K
cve[email protected]CVE-2022-25742
HistoryNov 15, 2022 - 10:15 a.m.

CVE-2022-25742

2022-11-1510:15:15
CWE-835
web.nvd.nist.gov
22
11
cve-2022-25742
denial of service
modem
igmpv2
snapdragon
consumer iot
industrial iot
voice & music
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

36.9%

Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Affected configurations

NVD
Node
qualcommar8031_firmwareMatch-
AND
qualcommar8031Match-
Node
qualcommcsra6620_firmwareMatch-
AND
qualcommcsra6620Match-
Node
qualcommcsra6640_firmwareMatch-
AND
qualcommcsra6640Match-
Node
qualcommmdm8207_firmwareMatch-
AND
qualcommmdm8207Match-
Node
qualcommmdm9205_firmwareMatch-
AND
qualcommmdm9205Match-
Node
qualcommmdm9206_firmwareMatch-
AND
qualcommmdm9206Match-
Node
qualcommmdm9207_firmwareMatch-
AND
qualcommmdm9207Match-
Node
qualcommmdm9607_firmwareMatch-
AND
qualcommmdm9607Match-
Node
qualcommqca4004_firmwareMatch-
AND
qualcommqca4004Match-
Node
qualcommqca4010_firmwareMatch-
AND
qualcommqca4010Match-
Node
qualcommqca4020_firmwareMatch-
AND
qualcommqca4020Match-
Node
qualcommqca4024_firmwareMatch-
AND
qualcommqca4024Match-
Node
qualcommqcs405_firmwareMatch-
AND
qualcommqcs405Match-
Node
qualcommwcd9306_firmwareMatch-
AND
qualcommwcd9306Match-
Node
qualcommwcd9330_firmwareMatch-
AND
qualcommwcd9330Match-
Node
qualcommwcd9335_firmwareMatch-
AND
qualcommwcd9335Match-
Node
qualcommwcn3980_firmwareMatch-
AND
qualcommwcn3980Match-
Node
qualcommwcn3998_firmwareMatch-
AND
qualcommwcn3998Match-
Node
qualcommwcn3999_firmwareMatch-
AND
qualcommwcn3999Match-
Node
qualcommwsa8810_firmwareMatch-
AND
qualcommwsa8810Match-
Node
qualcommwsa8815_firmwareMatch-
AND
qualcommwsa8815Match-

CNA Affected

[
  {
    "vendor": "Qualcomm, Inc.",
    "product": "Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music",
    "versions": [
      {
        "version": "AR8031",
        "status": "affected"
      },
      {
        "version": "CSRA6620",
        "status": "affected"
      },
      {
        "version": "CSRA6640",
        "status": "affected"
      },
      {
        "version": "MDM8207",
        "status": "affected"
      },
      {
        "version": "MDM9205",
        "status": "affected"
      },
      {
        "version": "MDM9206",
        "status": "affected"
      },
      {
        "version": "MDM9207",
        "status": "affected"
      },
      {
        "version": "MDM9607",
        "status": "affected"
      },
      {
        "version": "QCA4004",
        "status": "affected"
      },
      {
        "version": "QCA4010",
        "status": "affected"
      },
      {
        "version": "QCA4020",
        "status": "affected"
      },
      {
        "version": "QCA4024",
        "status": "affected"
      },
      {
        "version": "QCS405",
        "status": "affected"
      },
      {
        "version": "WCD9306",
        "status": "affected"
      },
      {
        "version": "WCD9330",
        "status": "affected"
      },
      {
        "version": "WCD9335",
        "status": "affected"
      },
      {
        "version": "WCN3980",
        "status": "affected"
      },
      {
        "version": "WCN3998",
        "status": "affected"
      },
      {
        "version": "WCN3999",
        "status": "affected"
      },
      {
        "version": "WSA8810",
        "status": "affected"
      },
      {
        "version": "WSA8815",
        "status": "affected"
      }
    ]
  }
]

Social References

More

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

36.9%

Related for CVE-2022-25742