7.8

CVE-2017-18282

Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9206 Firmware Version -
   Qualcomm ≫ Mdm9206 Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Sd210 Firmware Version -
   Qualcomm ≫ Sd210 Version -
Qualcomm ≫ Sd212 Firmware Version -
   Qualcomm ≫ Sd212 Version -
Qualcomm ≫ Sd205 Firmware Version -
   Qualcomm ≫ Sd205 Version -
Qualcomm ≫ Sd425 Firmware Version -
   Qualcomm ≫ Sd425 Version -
Qualcomm ≫ Sd430 Firmware Version -
   Qualcomm ≫ Sd430 Version -
Qualcomm ≫ Sd450 Firmware Version -
   Qualcomm ≫ Sd450 Version -
Qualcomm ≫ Sd625 Firmware Version -
   Qualcomm ≫ Sd625 Version -
Qualcomm ≫ Sd650 Firmware Version -
   Qualcomm ≫ Sd650 Version -
Qualcomm ≫ Sd652 Firmware Version -
   Qualcomm ≫ Sd652 Version -
Qualcomm ≫ Sd835 Firmware Version -
   Qualcomm ≫ Sd835 Version -
Qualcomm ≫ Sda660 Firmware Version -
   Qualcomm ≫ Sda660 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.171
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id/1041432
Third Party Advisory
VDB Entry
https://www.qualcomm.com/company/product-security/bulletins
Vendor Advisory
https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components
Third Party Advisory