Description

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Related CPE's

o

qualcomm

aqt1000_firmware

-

Vulnerable

h

qualcomm

aqt1000

-

o

qualcomm

qca6390_firmware

-

Vulnerable

h

qualcomm

qca6390

-

o

qualcomm

qca6391_firmware

-

Vulnerable

h

qualcomm

qca6391

-

o

qualcomm

qca6420_firmware

-

Vulnerable

h

qualcomm

qca6420

-

o

qualcomm

qca6421_firmware

-

Vulnerable

h

qualcomm

qca6421

-

o

qualcomm

qca6426_firmware

-

Vulnerable

h

qualcomm

qca6426

-

o

qualcomm

qca6430_firmware

-

Vulnerable

h

qualcomm

qca6430

-

o

qualcomm

qca6431_firmware

-

Vulnerable

h

qualcomm

qca6431

-

o

qualcomm

qca6436_firmware

-

Vulnerable

h

qualcomm

qca6436

-

o

qualcomm

qca6574_firmware

-

Vulnerable

h

qualcomm

qca6574

-

o

qualcomm

qca6574a_firmware

-

Vulnerable

h

qualcomm

qca6574a

-

o

qualcomm

qca6574au_firmware

-

Vulnerable

h

qualcomm

qca6574au

-

o

qualcomm

qca6595au_firmware

-

Vulnerable

h

qualcomm

qca6595au

-

o

qualcomm

qca6696_firmware

-

Vulnerable

h

qualcomm

qca6696

-

o

qualcomm

qcm2290_firmware

-

Vulnerable

h

qualcomm

qcm2290

-

o

qualcomm

qcm4290_firmware

-

Vulnerable

h

qualcomm

qcm4290

-

o

qualcomm

qcm6490_firmware

-

Vulnerable

h

qualcomm

qcm6490

-

o

qualcomm

qcs2290_firmware

-

Vulnerable

h

qualcomm

qcs2290

-

o

qualcomm

qcs4290_firmware

-

Vulnerable

h

qualcomm

qcs4290

-

o

qualcomm

qcs6490_firmware

-

Vulnerable

h

qualcomm

qcs6490

-

o

qualcomm

qsm8350_firmware

-

Vulnerable

h

qualcomm

qsm8350

-

o

qualcomm

sa6155_firmware

-

Vulnerable

h

qualcomm

sa6155

-

o

qualcomm

sa6155p_firmware

-

Vulnerable

h

qualcomm

sa6155p

-

o

qualcomm

sa8155_firmware

-

Vulnerable

h

qualcomm

sa8155

-

o

qualcomm

sa8155p_firmware

-

Vulnerable

h

qualcomm

sa8155p

-

o

qualcomm

sa8195p_firmware

-

Vulnerable

h

qualcomm

sa8195p

-

o

qualcomm

sa8540p_firmware

-

Vulnerable

h

qualcomm

sa8540p

-

o

qualcomm

sa9000p_firmware

-

Vulnerable

h

qualcomm

sa9000p

-

o

qualcomm

sd_675_firmware

-

Vulnerable

h

qualcomm

sd_675

-

o

qualcomm

sd_8cx_gen3_firmware

-

Vulnerable

h

qualcomm

sd_8cx_gen3

-

o

qualcomm

sd460_firmware

-

Vulnerable

h

qualcomm

sd460

-

o

qualcomm

sd480_firmware

-

Vulnerable

h

qualcomm

sd480

-

o

qualcomm

sd662_firmware

-

Vulnerable

h

qualcomm

sd662

-

o

qualcomm

sd665_firmware

-

Vulnerable

h

qualcomm

sd665

-

o

qualcomm

sd675_firmware

-

Vulnerable

h

qualcomm

sd675

-

o

qualcomm

sd678_firmware

-

Vulnerable

h

qualcomm

sd678

-

o

qualcomm

sd680_firmware

-

Vulnerable

h

qualcomm

sd680

-

o

qualcomm

sd690_5g_firmware

-

Vulnerable

h

qualcomm

sd690_5g

-

o

qualcomm

sd695_firmware

-

Vulnerable

h

qualcomm

sd695

-

o

qualcomm

sd720g_firmware

-

Vulnerable

h

qualcomm

sd720g

-

o

qualcomm

sd730_firmware

-

Vulnerable

h

qualcomm

sd730

-

o

qualcomm

sd750g_firmware

-

Vulnerable

h

qualcomm

sd750g

-

o

qualcomm

sd765_firmware

-

Vulnerable

h

qualcomm

sd765

-

o

qualcomm

sd765g_firmware

-

Vulnerable

h

qualcomm

sd765g

-

o

qualcomm

sd768g_firmware

-

Vulnerable

h

qualcomm

sd768g

-

o

qualcomm

sd778g_firmware

-

Vulnerable

h

qualcomm

sd778g

-

o

qualcomm

sd780g_firmware

-

Vulnerable

h

qualcomm

sd780g

-

o

qualcomm

sd855_firmware

-

Vulnerable

h

qualcomm

sd855

-

o

qualcomm

sd865_5g_firmware

-

Vulnerable

h

qualcomm

sd865_5g

-

o

qualcomm

sd870_firmware

-

Vulnerable

h

qualcomm

sd870

-

o

qualcomm

sd888_5g_firmware

-

Vulnerable

h

qualcomm

sd888_5g

-

o

qualcomm

sdx50m_firmware

-

Vulnerable

h

qualcomm

sdx50m

-

o

qualcomm

sdx55m_firmware

-

Vulnerable

h

qualcomm

sdx55m

-

o

qualcomm

sdxr2_5g_firmware

-

Vulnerable

h

qualcomm

sdxr2_5g

-

o

qualcomm

sm4125_firmware

-

Vulnerable

h

qualcomm

sm4125

-

o

qualcomm

sm6250_firmware

-

Vulnerable

h

qualcomm

sm6250

-

o

qualcomm

sm7250p_firmware

-

Vulnerable

h

qualcomm

sm7250p

-

o

qualcomm

sm7325p_firmware

-

Vulnerable

h

qualcomm

sm7325p

-

o

qualcomm

wcd9341_firmware

-

Vulnerable

h

qualcomm

wcd9341

-

o

qualcomm

wcd9370_firmware

-

Vulnerable

h

qualcomm

wcd9370

-

o

qualcomm

wcd9375_firmware

-

Vulnerable

h

qualcomm

wcd9375

-

o

qualcomm

wcd9380_firmware

-

Vulnerable

h

qualcomm

wcd9380

-

o

qualcomm

wcd9385_firmware

-

Vulnerable

h

qualcomm

wcd9385

-

o

qualcomm

wcn3910_firmware

-

Vulnerable

h

qualcomm

wcn3910

-

o

qualcomm

wcn3950_firmware

-

Vulnerable

h

qualcomm

wcn3950

-

o

qualcomm

wcn3980_firmware

-

Vulnerable

h

qualcomm

wcn3980

-

o

qualcomm

wcn3988_firmware

-

Vulnerable

h

qualcomm

wcn3988

-

o

qualcomm

wcn3991_firmware

-

Vulnerable

h

qualcomm

wcn3991

-

o

qualcomm

wcn3998_firmware

-

Vulnerable

h

qualcomm

wcn3998

-

o

qualcomm

wcn6740_firmware

-

Vulnerable

h

qualcomm

wcn6740

-

o

qualcomm

wcn6750_firmware

-

Vulnerable

h

qualcomm

wcn6750

-

o

qualcomm

wcn6850_firmware

-

Vulnerable

h

qualcomm

wcn6850

-

o

qualcomm

wcn6851_firmware

-

Vulnerable

h

qualcomm

wcn6851

-

o

qualcomm

wcn6855_firmware

-

Vulnerable

h

qualcomm

wcn6855

-

o

qualcomm

wcn6856_firmware

-

Vulnerable

h

qualcomm

wcn6856

-

o

qualcomm

wcn7850_firmware

-

Vulnerable

h

qualcomm

wcn7850

-

o

qualcomm

wcn7851_firmware

-

Vulnerable

h

qualcomm

wcn7851

-

o

qualcomm

wsa8810_firmware

-

Vulnerable

h

qualcomm

wsa8810

-

o

qualcomm

wsa8815_firmware

-

Vulnerable

h

qualcomm

wsa8815

-

o

qualcomm

wsa8830_firmware

-

Vulnerable

h

qualcomm

wsa8830

-

o

qualcomm

wsa8835_firmware

-

Vulnerable

h

qualcomm

wsa8835

-

References

https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-287

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-06-14T10:15:16.613

3 years ago

Last modified

2022-06-22T19:23:04.020

3 years ago