Lucene search

[email protected]CVE-2022-33222

HistoryApr 13, 2023 - 7:15 a.m.

CVE-2022-33222

2023-04-1307:15:14

CWE-126

CWE-125

[email protected]

web.nvd.nist.gov

cve-2022-33222

information disclosure

buffer over-read

modem

nvd

dns response packets

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

Affected configurations

NVD

Node

qualcommmdm9205_firmwareMatch-

AND

qualcommmdm9205Match-

Node

qualcommmdm9206_firmwareMatch-

AND

qualcommmdm9206Match-

Node

qualcommmdm9207_firmwareMatch-

AND

qualcommmdm9207Match-

Node

qualcommmdm8207_firmwareMatch-

AND

qualcommmdm8207Match-

Node

qualcommqca4004_firmwareMatch-

AND

qualcommqca4004Match-

Node

qualcommqca4010_firmwareMatch-

AND

qualcommqca4010Match-

Node

qualcommqts110_firmwareMatch-

AND

qualcommqts110Match-

Node

qualcommsnapdragon_wear_1100_firmwareMatch-

AND

qualcommsnapdragon_wear_1100Match-

Node

qualcommsnapdragon_wear_1200_firmwareMatch-

AND

qualcommsnapdragon_wear_1200Match-

Node

qualcommsnapdragon_wear_1300_firmwareMatch-

AND

qualcommsnapdragon_wear_1300Match-

Node

qualcommsnapdragon_x5_lte_modem_firmwareMatch-

AND

qualcommsnapdragon_x5_lte_modemMatch-

Node

qualcommwcd9330_firmwareMatch-

AND

qualcommwcd9330Match-

Node

qualcommwcd9306_firmwareMatch-

AND

qualcommwcd9306Match-

CPENameOperatorVersion
qualcomm:mdm9205_firmwarequalcomm mdm9205 firmwareeq-

CPE	Name	Operator	Version
qualcomm:mdm9205_firmware	qualcomm mdm9205 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Consumer IOT",
      "Snapdragon Industrial IOT"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "9205 LTE Modem"
      },
      {
        "status": "affected",
        "version": "9206 LTE Modem"
      },
      {
        "status": "affected",
        "version": "9207 LTE Modem"
      },
      {
        "status": "affected",
        "version": "MDM8207"
      },
      {
        "status": "affected",
        "version": "QCA4004"
      },
      {
        "status": "affected",
        "version": "QCA4010"
      },
      {
        "status": "affected",
        "version": "QTS110"
      },
      {
        "status": "affected",
        "version": "Snapdragon 1100 Wearable Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 1200 Wearable Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon Wear 1300 Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon X5 LTE Modem"
      },
      {
        "status": "affected",
        "version": "WCD9306"
      },
      {
        "status": "affected",
        "version": "WCD9330"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

Related for CVE-2022-33222

prion1 nvd1 cvelist1