Lucene search
QualcommVULNRICHMENT:CVE-2023-28561HistoryAug 08, 2023 - 9:15 a.m.
CVE-2023-28561 Buffer Copy Without Checking Size of Input in QESL
2023-08-0809:15:03
CWE-120
qualcomm
github.com
2
cve-2023-28561
qesl
memory corruption
buffer copy
input size checking
external esl device
firmware
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
51.0%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Memory corruption in QESL while processing payload from external ESL device to firmware.
CNA Affected
[
{
"vendor": "Qualcomm, Inc.",
"product": "Snapdragon",
"versions": [
{
"status": "affected",
"version": "QCN7606"
}
],
"platforms": [
"Snapdragon Industrial IOT"
],
"defaultStatus": "unaffected"
}
]ADP Affected
[
{
"cpes": [
"cpe:2.3:o:qualcomm:qcn7606_firmware:-:*:*:*:*:*:*:*"
],
"vendor": "qualcomm",
"product": "qcn7606_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "*"
}
],
"defaultStatus": "unknown"
}
]Related
nvd
nvd
CVE-2023-28561
2023-08-08 10:15:14
cvelist
cvelist
CVE-2023-28561 Buffer Copy Without Checking Size of Input in QESL
2023-08-08 09:15:03
cve
cve
CVE-2023-28561
2023-08-08 10:15:14
prion
prion
Memory corruption
2023-08-08 10:15:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
51.0%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2023-28561