CVE-2017-18317

EPSS 0.04%
Veröffentlicht 28.11.2018 15:29:00
Zuletzt bearbeitet 21.11.2024 03:19:50
Quelle product-security@qualcomm.com
CVE-Watchlists
Login
Unerledigt
Login

Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU,SD 410/12,SD 820,SD 820A.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Msm8996au Firmware Version-

Qualcomm ≫ Msm8996au Version-

Qualcomm ≫ Sd 410 Firmware Version-

Qualcomm ≫ Sd 410 Version-

Qualcomm ≫ Sd 412 Firmware Version-

Qualcomm ≫ Sd 412 Version-

Qualcomm ≫ Sd 820 Firmware Version-

Qualcomm ≫ Sd 820 Version-

Qualcomm ≫ Sd 820a Firmware Version-

Qualcomm ≫ Sd 820a Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.08

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.qualcomm.com/company/product-security/bulletins

Vendor Advisory

http://www.securityfocus.com/bid/105838

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-18317

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-18317

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-18317

EUVD