Lucene search

[email protected]CVE-2022-33270

HistoryApr 13, 2023 - 7:15 a.m.

CVE-2022-33270

2023-04-1307:15:16

CWE-367

[email protected]

web.nvd.nist.gov

cve-2022-33270

transient dos

time-of-check

time-of-use

race condition

modem

rrc reconfiguration

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.9%

JSON

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.

Affected configurations

NVD

Node

qualcommar8035_firmwareMatch-

AND

qualcommar8035Match-

Node

qualcommwcn3998_firmwareMatch-

AND

qualcommwcn3998Match-

Node

qualcommwcn6750_firmwareMatch-

AND

qualcommwcn6750Match-

Node

qualcommwcn685x-5_firmwareMatch-

AND

qualcommwcn685x-5Match-

Node

qualcommwcn685x-1_firmwareMatch-

AND

qualcommwcn685x-1Match-

Node

qualcommwcn785x-1_firmwareMatch-

AND

qualcommwcn785x-1Match-

Node

qualcommwcn785x-5_firmwareMatch-

AND

qualcommwcn785x-5Match-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6595au_firmwareMatch-

AND

qualcommqca6595auMatch-

Node

qualcommqca6696_firmwareMatch-

AND

qualcommqca6696Match-

Node

qualcommqca6698aq_firmwareMatch-

AND

qualcommqca6698aqMatch-

Node

qualcommqca8081_firmwareMatch-

AND

qualcommqca8081Match-

Node

qualcommqca8337_firmwareMatch-

AND

qualcommqca8337Match-

Node

qualcommqcm6490_firmwareMatch-

AND

qualcommqcm6490Match-

Node

qualcommqcn6024_firmwareMatch-

AND

qualcommqcn6024Match-

Node

qualcommqcn9024_firmwareMatch-

AND

qualcommqcn9024Match-

Node

qualcommqcs6490_firmwareMatch-

AND

qualcommqcs6490Match-

Node

qualcommsd778g_firmwareMatch-

AND

qualcommsd778gMatch-

Node

qualcommsdx57m_firmwareMatch-

AND

qualcommsdx57mMatch-

Node

qualcommsm7325p_firmwareMatch-

AND

qualcommsm7325pMatch-

Node

qualcommsm4375_firmwareMatch-

AND

qualcommsm4375Match-

Node

qualcommsm4350_firmwareMatch-

AND

qualcommsm4350Match-

Node

qualcommsm4350-ac_firmwareMatch-

AND

qualcommsm4350-acMatch-

Node

qualcommsm6375_firmwareMatch-

AND

qualcommsm6375Match-

Node

qualcommsm7325_firmwareMatch-

AND

qualcommsm7325Match-

Node

qualcommsm7325-ae_firmwareMatch-

AND

qualcommsm7325-aeMatch-

Node

qualcommsm7325-af_firmwareMatch-

AND

qualcommsm7325-afMatch-

Node

qualcommsm8450_firmwareMatch-

AND

qualcommsm8450Match-

Node

qualcommsm8350_firmwareMatch-

AND

qualcommsm8350Match-

Node

qualcommsm8350-ac_firmwareMatch-

AND

qualcommsm8350-acMatch-

Node

qualcommsnapdragon_auto_5g_modem-rf_firmwareMatch-

AND

qualcommsnapdragon_auto_5g_modem-rfMatch-

Node

qualcommsnapdragon_x65_5g_modem-rf_system_firmwareMatch-

AND

qualcommsnapdragon_x65_5g_modem-rf_systemMatch-

Node

qualcommsnapdragon_x70_modem-rf_system_firmwareMatch-

AND

qualcommsnapdragon_x70_modem-rf_systemMatch-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380Match-

AND

qualcommwcd9380_firmwareMatch-

Node

qualcommwcd9385Match-

AND

qualcommwcd9385_firmwareMatch-

Node

qualcommwcn3988Match-

AND

qualcommwcn3988_firmwareMatch-

Node

qualcommwsa8810Match-

AND

qualcommwsa8810_firmwareMatch-

Node

qualcommwsa8815Match-

AND

qualcommwsa8815_firmwareMatch-

Node

qualcommwsa8830Match-

AND

qualcommwsa8830_firmwareMatch-

Node

qualcommwsa8835Match-

AND

qualcommwsa8835_firmwareMatch-

CPENameOperatorVersion
qualcomm:ar8035_firmwarequalcomm ar8035 firmwareeq-

CPE	Name	Operator	Version
qualcomm:ar8035_firmware	qualcomm ar8035 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AR8035"
      },
      {
        "status": "affected",
        "version": "FastConnect 6200"
      },
      {
        "status": "affected",
        "version": "FastConnect 6700"
      },
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "QCA6391"
      },
      {
        "status": "affected",
        "version": "QCA6595AU"
      },
      {
        "status": "affected",
        "version": "QCA6696"
      },
      {
        "status": "affected",
        "version": "QCA6698AQ"
      },
      {
        "status": "affected",
        "version": "QCA8081"
      },
      {
        "status": "affected",
        "version": "QCA8337"
      },
      {
        "status": "affected",
        "version": "QCM6490"
      },
      {
        "status": "affected",
        "version": "QCN6024"
      },
      {
        "status": "affected",
        "version": "QCN9024"
      },
      {
        "status": "affected",
        "version": "QCS6490"
      },
      {
        "status": "affected",
        "version": "SD778G"
      },
      {
        "status": "affected",
        "version": "SDX57M"
      },
      {
        "status": "affected",
        "version": "SM7325P"
      },
      {
        "status": "affected",
        "version": "Snapdragon 4 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 480 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 695 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 778G 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 782G Mobile Platform (SM7325-AF)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 888 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon Auto 5G Modem-RF"
      },
      {
        "status": "affected",
        "version": "Snapdragon X65 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon X70 Modem-RF System"
      },
      {
        "status": "affected",
        "version": "WCD9370"
      },
      {
        "status": "affected",
        "version": "WCD9375"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/april-2023-bulletin

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.9%

JSON

Related for CVE-2022-33270

prion1 cvelist1 nvd1