7.8

CVE-2017-18311

EPSS 0.21%
Veröffentlicht 26.10.2018 13:29:00
Zuletzt bearbeitet 21.11.2024 03:19:49
Erkennungen
Login

XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

NVD 35 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Mdm9607 Firmware Version -

Qualcomm ≫ Mdm9607 Version -

Qualcomm ≫ Mdm9635m Firmware Version -

Qualcomm ≫ Mdm9635m Version -

Qualcomm ≫ Mdm9640 Firmware Version -

Qualcomm ≫ Mdm9640 Version -

Qualcomm ≫ Mdm9645 Firmware Version -

Qualcomm ≫ Mdm9645 Version -

Qualcomm ≫ Mdm9650 Firmware Version -

Qualcomm ≫ Mdm9650 Version -

Qualcomm ≫ Mdm9655 Firmware Version -

Qualcomm ≫ Mdm9655 Version -

Qualcomm ≫ Msm8909w Firmware Version -

Qualcomm ≫ Msm8909w Version -

Qualcomm ≫ Msm8996au Firmware Version -

Qualcomm ≫ Msm8996au Version -

Qualcomm ≫ Sd 210 Firmware Version -

Qualcomm ≫ Sd 210 Version -

Qualcomm ≫ Sd 212 Firmware Version -

Qualcomm ≫ Sd 212 Version -

Qualcomm ≫ Sd 205 Firmware Version -

Qualcomm ≫ Sd 205 Version -

Qualcomm ≫ Sd 410 Firmware Version -

Qualcomm ≫ Sd 410 Version -

Qualcomm ≫ Sd 412 Firmware Version -

Qualcomm ≫ Sd 412 Version -

Qualcomm ≫ Sd 425 Firmware Version -

Qualcomm ≫ Sd 425 Version -

Qualcomm ≫ Sd 427 Firmware Version -

Qualcomm ≫ Sd 427 Version -

Qualcomm ≫ Sd 430 Firmware Version -

Qualcomm ≫ Sd 430 Version -

Qualcomm ≫ Sd 435 Firmware Version -

Qualcomm ≫ Sd 435 Version -

Qualcomm ≫ Sd 450 Firmware Version -

Qualcomm ≫ Sd 450 Version -

Qualcomm ≫ Sd 615 Firmware Version -

Qualcomm ≫ Sd 615 Version -

Qualcomm ≫ Sd 616 Firmware Version -

Qualcomm ≫ Sd 616 Version -

Qualcomm ≫ Sd 415 Firmware Version -

Qualcomm ≫ Sd 415 Version -

Qualcomm ≫ Sd 625 Firmware Version -

Qualcomm ≫ Sd 625 Version -

Qualcomm ≫ Sd 650 Firmware Version -

Qualcomm ≫ Sd 650 Version -

Qualcomm ≫ Sd 652 Firmware Version -

Qualcomm ≫ Sd 652 Version -

Qualcomm ≫ Sd 810 Firmware Version -

Qualcomm ≫ Sd 810 Version -

Qualcomm ≫ Sd 820 Firmware Version -

Qualcomm ≫ Sd 820 Version -

Qualcomm ≫ Sd 820a Firmware Version -

Qualcomm ≫ Sd 820a Version -

Qualcomm ≫ Sd 835 Firmware Version -

Qualcomm ≫ Sd 835 Version -

Qualcomm ≫ Sda660 Firmware Version -

Qualcomm ≫ Sda660 Version -

Qualcomm ≫ Sdm429 Firmware Version -

Qualcomm ≫ Sdm429 Version -

Qualcomm ≫ Sdm439 Firmware Version -

Qualcomm ≫ Sdm439 Version -

Qualcomm ≫ Sdm630 Firmware Version -

Qualcomm ≫ Sdm630 Version -

Qualcomm ≫ Sdm632 Firmware Version -

Qualcomm ≫ Sdm632 Version -

Qualcomm ≫ Sdm636 Firmware Version -

Qualcomm ≫ Sdm636 Version -

Qualcomm ≫ Sdm660 Firmware Version -

Qualcomm ≫ Sdm660 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.109

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://www.qualcomm.com/company/product-security/bulletins

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-18311

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-18311

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-18311

EUVD