SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2024-23385

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

MEDIUM 6.5EPSS 0.25%

Does this matter?

Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.

Description

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

CVSS 3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.25% probability · 17th percentile
CISA KEV
Not listed
Weakness
CWE-617
Affected
qualcomm/wsa8845h firmware · qualcomm/wsa8845 firmware · qualcomm/wsa8840 firmware · qualcomm/wsa8835 firmware · qualcomm/wsa8832 firmware · qualcomm/wsa8830 firmware · qualcomm/wsa8815 firmware · qualcomm/wsa8810 firmware · qualcomm/wcn6755 firmware · qualcomm/wcn3988 firmware · qualcomm/wcn3980 firmware · qualcomm/wcn3950 firmware · qualcomm/wcn3680b firmware · qualcomm/wcn3660b firmware · qualcomm/wcn3620 firmware · qualcomm/wcn3615 firmware · qualcomm/wcn3610 firmware · qualcomm/wcd9395 firmware · qualcomm/wcd9390 firmware · qualcomm/wcd9385 firmware · +40 more
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.