Lucene search

K

[email protected]NVD:CVE-2022-33229

HistoryFeb 12, 2023 - 4:15 a.m.

CVE-2022-33229

2023-02-1204:15:13

CWE-125

CWE-126

[email protected]

web.nvd.nist.gov

cve-2022-33229

modem

buffer over-read

information disclosure

ipv4 packets

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.4%

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

Affected configurations

NVD

Node

qualcommar8031_firmwareMatch-

AND

qualcommar8031Match-

Node

qualcommcsra6620_firmwareMatch-

AND

qualcommcsra6620Match-

Node

qualcommcsra6640_firmwareMatch-

AND

qualcommcsra6640Match-

Node

qualcommmdm8207_firmwareMatch-

AND

qualcommmdm8207Match-

Node

qualcommmdm9205Match-

AND

qualcommmdm9205_firmwareMatch-

Node

qualcommmdm9206Match-

AND

qualcommmdm9206_firmwareMatch-

Node

qualcommmdm9207Match-

AND

qualcommmdm9207_firmwareMatch-

Node

qualcommmdm9607Match-

AND

qualcommmdm9607_firmwareMatch-

Node

qualcommqca4004Match-

AND

qualcommqca4004_firmwareMatch-

Node

qualcommqca4010Match-

AND

qualcommqca4010_firmwareMatch-

Node

qualcommqca4020Match-

AND

qualcommqca4020_firmwareMatch-

Node

qualcommqca4024Match-

AND

qualcommqca4024_firmwareMatch-

Node

qualcommqcs405_firmwareMatch-

AND

qualcommqcs405Match-

Node

qualcommqts110_firmwareMatch-

AND

qualcommqts110Match-

Node

qualcommwcd9306_firmwareMatch-

AND

qualcommwcd9306Match-

Node

qualcommwcd9330_firmwareMatch-

AND

qualcommwcd9330Match-

Node

qualcommwcd9335_firmwareMatch-

AND

qualcommwcd9335Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3999_firmwareMatch-

AND

qualcommwcn3999Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

References

www.qualcomm.com/company/product-security/bulletins/february-2023-bulletin

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.4%

Related for NVD:CVE-2022-33229

prion1 cve1 cvelist1