VulnerabilityModified
CVE-2021-35113
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
MEDIUM 6.8EPSS 0.15%
Does this matter?
Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.
Description
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.15% probability · 4th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-347
- Affected
- qualcomm/aqt1000 firmware · qualcomm/csrb31024 firmware · qualcomm/qca6174a firmware · qualcomm/qca6310 firmware · qualcomm/qca6335 firmware · qualcomm/qca6420 firmware · qualcomm/qca6430 firmware · qualcomm/qca6564au firmware · qualcomm/qca6574au firmware · qualcomm/qca6595au firmware · qualcomm/qca6696 firmware · qualcomm/qca9377 firmware · qualcomm/qcs410 firmware · qualcomm/qcs610 firmware · qualcomm/sa415m firmware · qualcomm/sd 675 firmware · qualcomm/sd429 firmware · qualcomm/sd675 firmware · qualcomm/sd678 firmware · qualcomm/sd720g firmware · +28 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.