Lucene search

[email protected]CVE-2023-33037

HistoryJan 02, 2024 - 6:15 a.m.

CVE-2023-33037

2024-01-0206:15:10

CWE-310

CWE-311

[email protected]

web.nvd.nist.gov

cve-2023-33037

cryptographic issue

automotive

key unwrapping

rpmb data

nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.

Affected configurations

NVD

Node

qualcommar8035_firmwareMatch-

AND

qualcommar8035Match-

Node

qualcommfastconnect_6200_firmwareMatch-

AND

qualcommfastconnect_6200Match-

Node

qualcommfastconnect_6700_firmwareMatch-

AND

qualcommfastconnect_6700Match-

Node

qualcommfastconnect_6800_firmwareMatch-

AND

qualcommfastconnect_6800Match-

Node

qualcommfastconnect_6900_firmwareMatch-

AND

qualcommfastconnect_6900Match-

Node

qualcommfastconnect_7800_firmwareMatch-

AND

qualcommfastconnect_7800Match-

Node

qualcommqam8255p_firmwareMatch-

AND

qualcommqam8255pMatch-

Node

qualcommqam8295p_firmwareMatch-

AND

qualcommqam8295pMatch-

Node

qualcommqam8650p_firmwareMatch-

AND

qualcommqam8650pMatch-

Node

qualcommqam8775p_firmwareMatch-

AND

qualcommqam8775pMatch-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6421_firmwareMatch-

AND

qualcommqca6421Match-

Node

qualcommqca6426_firmwareMatch-

AND

qualcommqca6426Match-

Node

qualcommqca6431_firmwareMatch-

AND

qualcommqca6431Match-

Node

qualcommqca6436_firmwareMatch-

AND

qualcommqca6436Match-

Node

qualcommqca6574_firmwareMatch-

AND

qualcommqca6574Match-

Node

qualcommqca6574a_firmwareMatch-

AND

qualcommqca6574aMatch-

Node

qualcommqca6574au_firmwareMatch-

AND

qualcommqca6574auMatch-

Node

qualcommqca6595_firmwareMatch-

AND

qualcommqca6595Match-

Node

qualcommqca6595au_firmwareMatch-

AND

qualcommqca6595auMatch-

Node

qualcommqca6696_firmwareMatch-

AND

qualcommqca6696Match-

Node

qualcommqca6698aq_firmwareMatch-

AND

qualcommqca6698aqMatch-

Node

qualcommqca6797aq_firmwareMatch-

AND

qualcommqca6797aqMatch-

Node

qualcommqca8081_firmwareMatch-

AND

qualcommqca8081Match-

Node

qualcommqca8337_firmwareMatch-

AND

qualcommqca8337Match-

Node

qualcommqcm4325_firmwareMatch-

AND

qualcommqcm4325Match-

Node

qualcommqcm4490_firmwareMatch-

AND

qualcommqcm4490Match-

Node

qualcommqcn6024_firmwareMatch-

AND

qualcommqcn6024Match-

Node

qualcommqcn9024_firmwareMatch-

AND

qualcommqcn9024Match-

Node

qualcommqcs4490_firmwareMatch-

AND

qualcommqcs4490Match-

Node

qualcommqcs8550_firmwareMatch-

AND

qualcommqcs8550Match-

Node

qualcommqsm8350_firmwareMatch-

AND

qualcommqsm8350Match-

Node

qualcommsa4150p_firmwareMatch-

AND

qualcommsa4150pMatch-

Node

qualcommsa4155p_firmwareMatch-

AND

qualcommsa4155pMatch-

Node

qualcommsa6145p_firmwareMatch-

AND

qualcommsa6145pMatch-

Node

qualcommsa6150p_firmwareMatch-

AND

qualcommsa6150pMatch-

Node

qualcommsa6155p_firmwareMatch-

AND

qualcommsa6155pMatch-

Node

qualcommsa8145p_firmwareMatch-

AND

qualcommsa8145pMatch-

Node

qualcommsa8150p_firmwareMatch-

AND

qualcommsa8150pMatch-

Node

qualcommsa8155p_firmwareMatch-

AND

qualcommsa8155pMatch-

Node

qualcommsa8195p_firmwareMatch-

AND

qualcommsa8195pMatch-

Node

qualcommsa8255p_firmwareMatch-

AND

qualcommsa8255pMatch-

Node

qualcommsa8295p_firmwareMatch-

AND

qualcommsa8295pMatch-

Node

qualcommsa8540pMatch-

AND

qualcommsa8540p_firmwareMatch-

Node

qualcommsa9000pMatch-

AND

qualcommsa9000p_firmwareMatch-

Node

qualcommsd_8_gen1_5gMatch-

AND

qualcommsd_8_gen1_5g_firmwareMatch-

Node

qualcommsd865_5gMatch-

AND

qualcommsd865_5g_firmwareMatch-

Node

qualcommsg4150pMatch-

AND

qualcommsg4150p_firmwareMatch-

Node

qualcommsm4450Match-

AND

qualcommsm4450_firmwareMatch-

Node

qualcommsm7250pMatch-

AND

qualcommsm7250p_firmwareMatch-

Node

qualcommsnapdragon_680_4g_mobile_platformMatch-

AND

qualcommsnapdragon_680_4g_mobile_platform_firmwareMatch-

Node

qualcommsnapdragon_685_4g_mobile_platformMatch-

AND

qualcommsnapdragon_685_4g_mobile_platform_firmwareMatch-

Node

qualcommsnapdragon_765_5g_mobile_platformMatch-

AND

qualcommsnapdragon_765_5g_mobile_platform_firmwareMatch-

Node

qualcommsnapdragon_765g_5g_mobile_platformMatch-

AND

qualcommsnapdragon_765g_5g_mobile_platform_firmwareMatch-

Node

qualcommsnapdragon_768g_5g_mobile_platformMatch-

AND

qualcommsnapdragon_768g_5g_mobile_platform_firmwareMatch-

Node

qualcommsnapdragon_8_gen_1_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_8_gen_1_mobile_platformMatch-

Node

qualcommsnapdragon_8\+_gen_1_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_8\+_gen_1_mobile_platformMatch-

Node

qualcommsnapdragon_865_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_865_5g_mobile_platformMatch-

Node

qualcommsnapdragon_865\+_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_865\+_5g_mobile_platformMatch-

Node

qualcommsnapdragon_870_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_870_5g_mobile_platformMatch-

Node

qualcommsnapdragon_888_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_888_5g_mobile_platformMatch-

Node

qualcommsnapdragon_888\+_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_888\+_5g_mobile_platformMatch-

Node

qualcommsnapdragon_8cx_gen_3_compute_platform_firmwareMatch-

AND

qualcommsnapdragon_8cx_gen_3_compute_platformMatch-

Node

qualcommsnapdragon_ar2_gen_1_platform_firmwareMatch-

AND

qualcommsnapdragon_ar2_gen_1_platformMatch-

Node

qualcommsnapdragon_x55_5g_modem-rf_system_firmwareMatch-

AND

qualcommsnapdragon_x55_5g_modem-rf_systemMatch-

Node

qualcommsnapdragon_x65_5g_modem-rf_system_firmwareMatch-

AND

qualcommsnapdragon_x65_5g_modem-rf_systemMatch-

Node

qualcommsnapdragon_xr2_5g_platform_firmwareMatch-

AND

qualcommsnapdragon_xr2_5g_platformMatch-

Node

qualcommssg2115p_firmwareMatch-

AND

qualcommssg2115pMatch-

Node

qualcommssg2125p_firmwareMatch-

AND

qualcommssg2125pMatch-

Node

qualcommsxr1230p_firmwareMatch-

AND

qualcommsxr1230pMatch-

Node

qualcommsxr2130_firmwareMatch-

AND

qualcommsxr2130Match-

Node

qualcommsxr2230p_firmwareMatch-

AND

qualcommsxr2230pMatch-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8832_firmwareMatch-

AND

qualcommwsa8832Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

CPENameOperatorVersion
qualcomm:ar8035_firmwarequalcomm ar8035 firmwareeq-

CPE	Name	Operator	Version
qualcomm:ar8035_firmware	qualcomm ar8035 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Compute",
      "Snapdragon Consumer IOT",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "AR8035"
      },
      {
        "status": "affected",
        "version": "FastConnect 6200"
      },
      {
        "status": "affected",
        "version": "FastConnect 6700"
      },
      {
        "status": "affected",
        "version": "FastConnect 6800"
      },
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "QAM8255P"
      },
      {
        "status": "affected",
        "version": "QAM8295P"
      },
      {
        "status": "affected",
        "version": "QAM8650P"
      },
      {
        "status": "affected",
        "version": "QAM8775P"
      },
      {
        "status": "affected",
        "version": "QCA6391"
      },
      {
        "status": "affected",
        "version": "QCA6421"
      },
      {
        "status": "affected",
        "version": "QCA6426"
      },
      {
        "status": "affected",
        "version": "QCA6431"
      },
      {
        "status": "affected",
        "version": "QCA6436"
      },
      {
        "status": "affected",
        "version": "QCA6574"
      },
      {
        "status": "affected",
        "version": "QCA6574A"
      },
      {
        "status": "affected",
        "version": "QCA6574AU"
      },
      {
        "status": "affected",
        "version": "QCA6595"
      },
      {
        "status": "affected",
        "version": "QCA6595AU"
      },
      {
        "status": "affected",
        "version": "QCA6696"
      },
      {
        "status": "affected",
        "version": "QCA6698AQ"
      },
      {
        "status": "affected",
        "version": "QCA6797AQ"
      },
      {
        "status": "affected",
        "version": "QCA8081"
      },
      {
        "status": "affected",
        "version": "QCA8337"
      },
      {
        "status": "affected",
        "version": "QCM4325"
      },
      {
        "status": "affected",
        "version": "QCM4490"
      },
      {
        "status": "affected",
        "version": "QCN6024"
      },
      {
        "status": "affected",
        "version": "QCN9024"
      },
      {
        "status": "affected",
        "version": "QCS4490"
      },
      {
        "status": "affected",
        "version": "QCS8550"
      },
      {
        "status": "affected",
        "version": "QSM8350"
      },
      {
        "status": "affected",
        "version": "SA4150P"
      },
      {
        "status": "affected",
        "version": "SA4155P"
      },
      {
        "status": "affected",
        "version": "SA6145P"
      },
      {
        "status": "affected",
        "version": "SA6150P"
      },
      {
        "status": "affected",
        "version": "SA6155P"
      },
      {
        "status": "affected",
        "version": "SA8145P"
      },
      {
        "status": "affected",
        "version": "SA8150P"
      },
      {
        "status": "affected",
        "version": "SA8155P"
      },
      {
        "status": "affected",
        "version": "SA8195P"
      },
      {
        "status": "affected",
        "version": "SA8255P"
      },
      {
        "status": "affected",
        "version": "SA8295P"
      },
      {
        "status": "affected",
        "version": "SA8540P"
      },
      {
        "status": "affected",
        "version": "SA9000P"
      },
      {
        "status": "affected",
        "version": "SD 8 Gen1 5G"
      },
      {
        "status": "affected",
        "version": "SD865 5G"
      },
      {
        "status": "affected",
        "version": "SG4150P"
      },
      {
        "status": "affected",
        "version": "SM4450"
      },
      {
        "status": "affected",
        "version": "SM7250P"
      },
      {
        "status": "affected",
        "version": "Snapdragon 680 4G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 765 5G Mobile Platform (SM7250-AA)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 765G 5G Mobile Platform (SM7250-AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 768G 5G Mobile Platform (SM7250-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8+ Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 865 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 888 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)"
      },
      {
        "status": "affected",
        "version": "Snapdragon AR2 Gen 1 Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon X55 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon X65 5G Modem-RF System"
      },
      {
        "status": "affected",
        "version": "Snapdragon XR2 5G Platform"
      },
      {
        "status": "affected",
        "version": "SSG2115P"
      },
      {
        "status": "affected",
        "version": "SSG2125P"
      },
      {
        "status": "affected",
        "version": "SXR1230P"
      },
      {
        "status": "affected",
        "version": "SXR2130"
      },
      {
        "status": "affected",
        "version": "SXR2230P"
      },
      {
        "status": "affected",
        "version": "WCD9370"
      },
      {
        "status": "affected",
        "version": "WCD9375"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCN3950"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8832"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

References

www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-33037

cvelist1 nvd1 prion1