7.8

CVE-2017-18282

Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9206 Firmware Version-
   Qualcomm ≫ Mdm9206 Version-
Qualcomm ≫ Mdm9607 Firmware Version-
   Qualcomm ≫ Mdm9607 Version-
Qualcomm ≫ Mdm9650 Firmware Version-
   Qualcomm ≫ Mdm9650 Version-
Qualcomm ≫ Sd210 Firmware Version-
   Qualcomm ≫ Sd210 Version-
Qualcomm ≫ Sd212 Firmware Version-
   Qualcomm ≫ Sd212 Version-
Qualcomm ≫ Sd205 Firmware Version-
   Qualcomm ≫ Sd205 Version-
Qualcomm ≫ Sd425 Firmware Version-
   Qualcomm ≫ Sd425 Version-
Qualcomm ≫ Sd430 Firmware Version-
   Qualcomm ≫ Sd430 Version-
Qualcomm ≫ Sd450 Firmware Version-
   Qualcomm ≫ Sd450 Version-
Qualcomm ≫ Sd625 Firmware Version-
   Qualcomm ≫ Sd625 Version-
Qualcomm ≫ Sd650 Firmware Version-
   Qualcomm ≫ Sd650 Version-
Qualcomm ≫ Sd652 Firmware Version-
   Qualcomm ≫ Sd652 Version-
Qualcomm ≫ Sd835 Firmware Version-
   Qualcomm ≫ Sd835 Version-
Qualcomm ≫ Sda660 Firmware Version-
   Qualcomm ≫ Sda660 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.156
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
http://www.securitytracker.com/id/1041432
Third Party Advisory
VDB Entry