title: Improper Authorization in WLAN Host
description: Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
affected:
{
defaultStatus: unaffected
platforms: [Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables]
product: Snapdragon
vendor: Qualcomm, Inc.
versions:
status: affected, version: 9206 LTE Modem
status: affected, version: APQ8017
status: affected, version: APQ8052
status: affected, version: APQ8056
status: affected, version: APQ8076
status: affected, version: AR8031
status: affected, version: C-V2X 9150
status: affected, version: CSRA6620
status: affected, version: CSRA6640
status: affected, version: FastConnect 6200
status: affected, version: Home Hub 100 Platform
status: affected, version: MDM9250
status: affected, version: MDM9628
status: affected, version: MDM9650
status: affected, version: MSM8108
status: affected, version: MSM8209
status: affected, version: MSM8608
status: affected, version: MSM8909W
status: affected, version: MSM8996AU
status: affected, version: QCA6174A
status: affected, version: QCA6175A
status: affected, version: QCA6554A
status: affected, version: QCA6564A
status: affected, version: QCA6564AU
status: affected, version: QCA6574
status: affected, version: QCA6574A
status: affected, version: QCA6574AU
status: affected, version: QCA6584
status: affected, version: QCA6584AU
status: affected, version: QCA6595
status: affected, version: QCA6595AU
status: affected, version: QCA6696
status: affected, version: QCA9367
status: affected, version: QCA9377
status: affected, version: QCA9379
status: affected, version: Qualcomm 205 Mobile Platform
status: affected, version: Qualcomm 215 Mobile Platform
status: affected, version: SD626
status: affected, version: SDM429W
status: affected, version: SDX20M
status: affected, version: Smart Audio 200 Platform
status: affected, version: Smart Audio 400 Platform
status: affected, version: Smart Display 200 Platform (APQ5053-AA)
status: affected, version: Snapdragon 1200 Wearable Platform
status: affected, version: Snapdragon 208 Processor
status: affected, version: Snapdragon 210 Processor
status: affected, version: Snapdragon 212 Mobile Platform
status: affected, version: Snapdragon 425 Mobile Platform
status: affected, version: Snapdragon 429 Mobile Platform
status: affected, version: Snapdragon 439 Mobile Platform
status: affected, version: Snapdragon 450 Mobile Platform
status: affected, version: Snapdragon 617 Processor
status: affected, version: Snapdragon 625 Mobile Platform
status: affected, version: Snapdragon 626 Mobile Platform
status: affected, version: Snapdragon 632 Mobile Platform
status: affected, version: Snapdragon 650 Mobile Platform
status: affected, version: Snapdragon 652 Mobile Platform
status: affected, version: Snapdragon 653 Mobile Platform
status: affected, version: Snapdragon 820 Automotive Platform
status: affected, version: Snapdragon Auto 5G Modem-RF
status: affected, version: Snapdragon Wear 2100 Platform
status: affected, version: Snapdragon Wear 2500 Platform
status: affected, version: Snapdragon Wear 3100 Platform
status: affected, version: Snapdragon Wear 4100+ Platform
status: affected, version: Snapdragon X12 LTE Modem
status: affected, version: Snapdragon X20 LTE Modem
status: affected, version: Snapdragon X5 LTE Modem
status: affected, version: Vision Intelligence 100 Platform (APQ8053-AA)
status: affected, version: Vision Intelligence 200 Platform (APQ8053-AC)
status: affected, version: WCD9326
status: affected, version: WCD9330
status: affected, version: WCD9335
status: affected, version: WCN3610
status: affected, version: WCN3615
status: affected, version: WCN3620
status: affected, version: WCN3660
status: affected, version: WCN3660B
status: affected, version: WCN3680
status: affected, version: WCN3680B
status: affected, version: WCN3980
status: affected, version: WSA8810
status: affected, version: WSA8815
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL