Lucene search

QualcommCVE-2023-28561

HistoryAug 08, 2023 - 10:15 a.m.

CVE-2023-28561

2023-08-0810:15:14

CWE-787

CWE-120

qualcomm

web.nvd.nist.gov

cve-2023-28561

memory corruption

qesl

esl device

firmware

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

51.0%

JSON

Memory corruption in QESL while processing payload from external ESL device to firmware.

Affected configurations

Nvd

Node

qualcommqcn7606_firmwareMatch-

AND

qualcommqcn7606Match-

VendorProductVersionCPE
qualcommqcn7606_firmware-cpe:2.3:o:qualcomm:qcn7606_firmware:-:*:*:*:*:*:*:*
qualcommqcn7606-cpe:2.3:h:qualcomm:qcn7606:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qualcomm	qcn7606_firmware	-	cpe:2.3:o:qualcomm:qcn7606_firmware:-:::::::*
qualcomm	qcn7606	-	cpe:2.3:h:qualcomm:qcn7606:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Industrial IOT"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "QCN7606"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

51.0%

JSON

Related for CVE-2023-28561