Lucene search

K
cve[email protected]CVE-2022-33265
HistoryJan 09, 2023 - 8:15 a.m.

CVE-2022-33265

2023-01-0908:15:12
CWE-787
web.nvd.nist.gov
21
cve-2022-33265
memory corruption
powerline communication
firmware
information exposure
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.

Affected configurations

NVD
Node
qualcommqca7500_firmwareMatch-
AND
qualcommqca7500Match-
Node
qualcommqca7520_firmwareMatch-
AND
qualcommqca7520Match-
Node
qualcommqca7550_firmwareMatch-
AND
qualcommqca7550Match-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Wired Infrastructure and Networking"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "QCA7500"
      },
      {
        "status": "affected",
        "version": "QCA7520"
      },
      {
        "status": "affected",
        "version": "QCA7550"
      }
    ]
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

Related for CVE-2022-33265