Lucene search

K
cvelistQualcommCVELIST:CVE-2022-25674
HistoryNov 15, 2022 - 12:00 a.m.

CVE-2022-25674

2022-11-1500:00:00
qualcomm
www.cve.org
cryptographic issues
wlan
group key handshake
wpa
wpa2
snapdragon consumer iot
snapdragon industrial iot
snapdragon voice & music

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

CNA Affected

[
  {
    "vendor": "Qualcomm, Inc.",
    "product": "Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music",
    "versions": [
      {
        "version": "AR8031",
        "status": "affected"
      },
      {
        "version": "CSRA6620",
        "status": "affected"
      },
      {
        "version": "CSRA6640",
        "status": "affected"
      },
      {
        "version": "MDM9205",
        "status": "affected"
      },
      {
        "version": "QCA4004",
        "status": "affected"
      },
      {
        "version": "QCA4010",
        "status": "affected"
      },
      {
        "version": "QCA4020",
        "status": "affected"
      },
      {
        "version": "QCA4024",
        "status": "affected"
      },
      {
        "version": "QCS405",
        "status": "affected"
      },
      {
        "version": "WCD9306",
        "status": "affected"
      },
      {
        "version": "WCD9335",
        "status": "affected"
      },
      {
        "version": "WCN3980",
        "status": "affected"
      },
      {
        "version": "WCN3998",
        "status": "affected"
      },
      {
        "version": "WCN3999",
        "status": "affected"
      },
      {
        "version": "WSA8810",
        "status": "affected"
      },
      {
        "version": "WSA8815",
        "status": "affected"
      }
    ]
  }
]

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

Related for CVELIST:CVE-2022-25674