description: Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
problem types: Cryptographic Issue in WLAN
affected:
{
vendor: Qualcomm, Inc.
product: Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
versions:
version: APQ8009, status: affected
version: APQ8009W, status: affected
version: APQ8016, status: affected
version: APQ8017, status: affected
version: APQ8037, status: affected
version: APQ8052, status: affected
version: APQ8053, status: affected
version: APQ8056, status: affected
version: APQ8064AU, status: affected
version: APQ8076, status: affected
version: APQ8092, status: affected
version: APQ8094, status: affected
version: APQ8096AU, status: affected
version: AR8031, status: affected
version: CSRA6620, status: affected
version: CSRA6640, status: affected
version: CSRB31024, status: affected
version: MDM8215, status: affected
version: MDM9205, status: affected
version: MDM9206, status: affected
version: MDM9215, status: affected
version: MDM9250, status: affected
version: MDM9310, status: affected
version: MDM9607, status: affected
version: MDM9615, status: affected
version: MDM9628, status: affected
version: MDM9640, status: affected
version: MDM9645, status: affected
version: MDM9650, status: affected
version: MSM8108, status: affected
version: MSM8208, status: affected
version: MSM8209, status: affected
version: MSM8608, status: affected
version: MSM8909W, status: affected
version: MSM8917, status: affected
version: MSM8920, status: affected
version: MSM8937, status: affected
version: MSM8940, status: affected
version: MSM8952, status: affected
version: MSM8953, status: affected
version: MSM8956, status: affected
version: MSM8976, status: affected
version: MSM8976SG, status: affected
version: MSM8992, status: affected
version: MSM8994, status: affected
version: MSM8996AU, status: affected
version: PM8937, status: affected
version: QCA0000, status: affected
version: QCA1023, status: affected
version: QCA1990, status: affected
version: QCA4004, status: affected
version: QCA4010, status: affected
version: QCA4020, status: affected
version: QCA4024, status: affected
version: QCA6174, status: affected
version: QCA6174A, status: affected
version: QCA6175A, status: affected
version: QCA6310, status: affected
version: QCA6320, status: affected
version: QCA6554A, status: affected
version: QCA6564, status: affected
version: QCA6564A, status: affected
version: QCA6564AU, status: affected
version: QCA6574, status: affected
version: QCA6574A, status: affected
version: QCA6574AU, status: affected
version: QCA6584, status: affected
version: QCA6584AU, status: affected
version: QCA6595, status: affected
version: QCA6595AU, status: affected
version: QCA6696, status: affected
version: QCA9367, status: affected
version: QCA9369, status: affected
version: QCA9377, status: affected
version: QCA9379, status: affected
version: QCC5100, status: affected
version: QCS405, status: affected
version: QET4101, status: affected
version: QSW8573, status: affected
version: Qualcomm215, status: affected
version: SA415M, status: affected
version: SA515M, status: affected
version: SA6145P, status: affected
version: SA6150P, status: affected
version: SA6155, status: affected
version: SA6155P, status: affected
version: SA8145P, status: affected
version: SA8150P, status: affected
version: SA8155, status: affected
version: SA8155P, status: affected
version: SA8195P, status: affected
version: SD 455, status: affected
version: SD 636, status: affected
version: SD205, status: affected
version: SD210, status: affected
version: SD429, status: affected
version: SD439, status: affected
version: SD450, status: affected
version: SD460, status: affected
version: SD632, status: affected
version: SD660, status: affected
version: SD820, status: affected
version: SD821, status: affected
version: SD835, status: affected
version: SD845, status: affected
version: SDA429W, status: affected
version: SDM429W, status: affected
version: SDM630, status: affected
version: SDW2500, status: affected
version: SDX12, status: affected
version: SDX20, status: affected
version: SDX20M, status: affected
version: SDX24, status: affected
version: SDX55, status: affected
version: SW5100, status: affected
version: SW5100P, status: affected
version: WCD9306, status: affected
version: WCD9326, status: affected
version: WCD9330, status: affected
version: WCD9335, status: affected
version: WCD9340, status: affected
version: WCD9341, status: affected
version: WCD9360, status: affected
version: WCD9370, status: affected
version: WCD9375, status: affected
version: WCN3610, status: affected
version: WCN3615, status: affected
version: WCN3620, status: affected
version: WCN3660, status: affected
version: WCN3660B, status: affected
version: WCN3680, status: affected
version: WCN3680B, status: affected
version: WCN3950, status: affected
version: WCN3980, status: affected
version: WCN3988, status: affected
version: WCN3990, status: affected
version: WCN3998, status: affected
version: WCN3999, status: affected
version: WSA8810, status: affected
version: WSA8815, status: affected
version: WSA8830, status: affected
version: WSA8835, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 9.1
baseSeverity: CRITICAL
]