title: Improper Authentication in Automotive OS
description: Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
affected:
{
defaultStatus: unaffected
platforms: [Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables]
product: Snapdragon
vendor: Qualcomm, Inc.
versions:
status: affected, version: AQT1000
status: affected, version: AR8031
status: affected, version: AR8035
status: affected, version: C-V2X 9150
status: affected, version: CSRA6620
status: affected, version: CSRA6640
status: affected, version: CSRB31024
status: affected, version: FastConnect 6200
status: affected, version: QAM8255P
status: affected, version: QAM8295P
status: affected, version: QAM8775P
status: affected, version: QCA6174A
status: affected, version: QCA6310
status: affected, version: QCA6335
status: affected, version: QCA6391
status: affected, version: QCA6420
status: affected, version: QCA6430
status: affected, version: QCA6564
status: affected, version: QCA6564AU
status: affected, version: QCA6574
status: affected, version: QCA6574A
status: affected, version: QCA6574AU
status: affected, version: QCA6595
status: affected, version: QCA6595AU
status: affected, version: QCA6696
status: affected, version: QCA6698AQ
status: affected, version: QCA8337
status: affected, version: QCA9377
status: affected, version: QCM6125
status: affected, version: QCN9074
status: affected, version: QCS410
status: affected, version: QCS610
status: affected, version: QCS6125
status: affected, version: QCS8155
status: affected, version: Qualcomm 205 Mobile Platform
status: affected, version: Qualcomm 215 Mobile Platform
status: affected, version: Qualcomm Video Collaboration VC1 Platform
status: affected, version: Qualcomm Video Collaboration VC3 Platform
status: affected, version: Robotics RB3 Platform
status: affected, version: SA6145P
status: affected, version: SA6150P
status: affected, version: SA6155
status: affected, version: SA6155P
status: affected, version: SA8145P
status: affected, version: SA8150P
status: affected, version: SA8155
status: affected, version: SA8155P
status: affected, version: SA8195P
status: affected, version: SA8255P
status: affected, version: SA8295P
status: affected, version: SA8540P
status: affected, version: SA8770P
status: affected, version: SA8775P
status: affected, version: SA9000P
status: affected, version: SD 675
status: affected, version: SD660
status: affected, version: SD675
status: affected, version: SD730
status: affected, version: SD855
status: affected, version: SDM429W
status: affected, version: SDX55
status: affected, version: Smart Audio 400 Platform
status: affected, version: Snapdragon 210 Processor
status: affected, version: Snapdragon 212 Mobile Platform
status: affected, version: Snapdragon 429 Mobile Platform
status: affected, version: Snapdragon 660 Mobile Platform
status: affected, version: Snapdragon 665 Mobile Platform
status: affected, version: Snapdragon 675 Mobile Platform
status: affected, version: Snapdragon 678 Mobile Platform (SM6150-AC)
status: affected, version: Snapdragon 730 Mobile Platform (SM7150-AA)
status: affected, version: Snapdragon 730G Mobile Platform (SM7150-AB)
status: affected, version: Snapdragon 732G Mobile Platform (SM7150-AC)
status: affected, version: Snapdragon 845 Mobile Platform
status: affected, version: Snapdragon 855 Mobile Platform
status: affected, version: Snapdragon 855+/860 Mobile Platform (SM8150-AC)
status: affected, version: Snapdragon Auto 5G Modem-RF
status: affected, version: Snapdragon Wear 4100+ Platform
status: affected, version: Snapdragon X24 LTE Modem
status: affected, version: Snapdragon Auto 4G Modem
status: affected, version: Vision Intelligence 300 Platform
status: affected, version: Vision Intelligence 400 Platform
status: affected, version: WCD9326
status: affected, version: WCD9335
status: affected, version: WCD9340
status: affected, version: WCD9341
status: affected, version: WCD9360
status: affected, version: WCD9370
status: affected, version: WCD9371
status: affected, version: WCD9375
status: affected, version: WCN3610
status: affected, version: WCN3615
status: affected, version: WCN3620
status: affected, version: WCN3660B
status: affected, version: WCN3680
status: affected, version: WCN3680B
status: affected, version: WCN3950
status: affected, version: WCN3980
status: affected, version: WCN3990
status: affected, version: WSA8810
status: affected, version: WSA8815
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL