VulnerabilityModified
CVE-2021-30346
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
MEDIUM 5.5EPSS 0.16%
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.16% probability · 5th percentile
- CISA KEV
- Not listed
- Affected
- qualcomm/ar8035 firmware · qualcomm/qca9984 firmware · qualcomm/qcm2290 firmware · qualcomm/qcm4290 firmware · qualcomm/qcs2290 firmware · qualcomm/qcs405 firmware · qualcomm/qcs4290 firmware · qualcomm/sd460 firmware · qualcomm/sd480 firmware · qualcomm/sd662 firmware · qualcomm/sd680 firmware · qualcomm/sm6375 firmware · qualcomm/sw5100 firmware · qualcomm/sw5100p firmware · qualcomm/wcd9370 firmware · qualcomm/wcd9375 firmware · qualcomm/wcd9385 firmware · qualcomm/wcn3910 firmware · qualcomm/wcn3950 firmware · qualcomm/wcn3980 firmware · +8 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.