VulnerabilityModified
CVE-2022-25685
Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
HIGH 7.5EPSS 0.38%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.38%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.38% probability · 31th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- qualcomm/apq8009 firmware · qualcomm/apq8017 firmware · qualcomm/apq8037 firmware · qualcomm/aqt1000 firmware · qualcomm/ar8035 firmware · qualcomm/csra6620 firmware · qualcomm/csra6640 firmware · qualcomm/msm8108 firmware · qualcomm/msm8208 firmware · qualcomm/msm8209 firmware · qualcomm/msm8608 firmware · qualcomm/msm8917 firmware · qualcomm/msm8937 firmware · qualcomm/qca6174a firmware · qualcomm/qca6310 firmware · qualcomm/qca6320 firmware · qualcomm/qca6390 firmware · qualcomm/qca6391 firmware · qualcomm/qca6421 firmware · qualcomm/qca6426 firmware · +40 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.