title: Information Exposure in Linux Networking Firmware
description: Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
affected:
{
defaultStatus: unaffected
platforms: Snapdragon Wired Infrastructure and Networking
product: Snapdragon
vendor: Qualcomm, Inc.
versions:
status: affected, version: CSR8811
status: affected, version: IPQ6000
status: affected, version: IPQ6005
status: affected, version: IPQ6010
status: affected, version: IPQ6018
status: affected, version: IPQ6028
status: affected, version: IPQ9008
status: affected, version: IPQ9574
status: affected, version: QCA4024
status: affected, version: QCA8072
status: affected, version: QCA8075
status: affected, version: QCA8081
status: affected, version: QCA8082
status: affected, version: QCA8084
status: affected, version: QCA8085
status: affected, version: QCA8386
status: affected, version: QCN5021
status: affected, version: QCN5022
status: affected, version: QCN5052
status: affected, version: QCN5121
status: affected, version: QCN5122
status: affected, version: QCN5152
status: affected, version: QCN6023
status: affected, version: QCN6024
status: affected, version: QCN9000
status: affected, version: QCN9022
status: affected, version: QCN9024
status: affected, version: QCN9070
status: affected, version: QCN9072
status: affected, version: QCN9074
status: affected, version: QCN9274
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL