Lucene search
HistoryApr 13, 2023 - 7:15 a.m.
CVE-2022-25745
cve-2022-25745
memory corruption
modem
improper input validation
coap message
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.5%
Memory corruption in modem due to improper input validation while handling the incoming CoAP message
Affected configurations
Node
qualcommmdm9205_firmwareMatch-
qualcommmdm9205Match-
Node
qualcommqca4004_firmwareMatch-
qualcommqca4004Match-
Node
qualcommqts110_firmwareMatch-
qualcommqts110Match-
Node
qualcommsnapdragon_wear_1300_firmwareMatch-
qualcommsnapdragon_wear_1300Match-
Node
qualcommwcd9306_firmwareMatch-
qualcommwcd9306Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| qualcomm:mdm9205_firmware | qualcomm mdm9205 firmware | eq | - |
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Snapdragon Industrial IOT"
],
"product": "Snapdragon",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "9205 LTE Modem"
},
{
"status": "affected",
"version": "QCA4004"
},
{
"status": "affected",
"version": "QTS110"
},
{
"status": "affected",
"version": "Snapdragon Wear 1300 Platform"
},
{
"status": "affected",
"version": "WCD9306"
}
]
}
]Social References
More
Related
prion
prion
Memory corruption
2023-04-13 07:15:00
vulnrichment
vulnrichment
CVE-2022-25745 Always Incorrect Control Flow Implementation in MODEM
2023-04-04 04:46:20
cvelist
cvelist
CVE-2022-25745 Always Incorrect Control Flow Implementation in MODEM
2023-04-04 04:46:20
nvd
nvd
CVE-2022-25745
2023-04-13 07:15:13
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.5%
Related for CVE-2022-25745