6.5

CVE-2024-45556

Improper Access Control for Register Interface in TZ Firmware

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ipq5300 Firmware Version-
   Qualcomm ≫ Ipq5300 Version-
Qualcomm ≫ Ipq5302 Firmware Version-
   Qualcomm ≫ Ipq5302 Version-
Qualcomm ≫ Ipq5312 Firmware Version-
   Qualcomm ≫ Ipq5312 Version-
Qualcomm ≫ Ipq5332 Firmware Version-
   Qualcomm ≫ Ipq5332 Version-
Qualcomm ≫ Ipq9008 Firmware Version-
   Qualcomm ≫ Ipq9008 Version-
Qualcomm ≫ Ipq9048 Firmware Version-
   Qualcomm ≫ Ipq9048 Version-
Qualcomm ≫ Ipq9554 Firmware Version-
   Qualcomm ≫ Ipq9554 Version-
Qualcomm ≫ Ipq9570 Firmware Version-
   Qualcomm ≫ Ipq9570 Version-
Qualcomm ≫ Ipq9574 Firmware Version-
   Qualcomm ≫ Ipq9574 Version-
Qualcomm ≫ Qca0000 Firmware Version-
   Qualcomm ≫ Qca0000 Version-
Qualcomm ≫ Qca8075 Firmware Version-
   Qualcomm ≫ Qca8075 Version-
Qualcomm ≫ Qca8081 Firmware Version-
   Qualcomm ≫ Qca8081 Version-
Qualcomm ≫ Qca8082 Firmware Version-
   Qualcomm ≫ Qca8082 Version-
Qualcomm ≫ Qca8084 Firmware Version-
   Qualcomm ≫ Qca8084 Version-
Qualcomm ≫ Qca8085 Firmware Version-
   Qualcomm ≫ Qca8085 Version-
Qualcomm ≫ Qca8386 Firmware Version-
   Qualcomm ≫ Qca8386 Version-
Qualcomm ≫ Qcf8000 Firmware Version-
   Qualcomm ≫ Qcf8000 Version-
Qualcomm ≫ Qcf8000sfp Firmware Version-
   Qualcomm ≫ Qcf8000sfp Version-
Qualcomm ≫ Qcf8001 Firmware Version-
   Qualcomm ≫ Qcf8001 Version-
Qualcomm ≫ Qcn5124 Firmware Version-
   Qualcomm ≫ Qcn5124 Version-
Qualcomm ≫ Qcn6224 Firmware Version-
   Qualcomm ≫ Qcn6224 Version-
Qualcomm ≫ Qcn6402 Firmware Version-
   Qualcomm ≫ Qcn6402 Version-
Qualcomm ≫ Qcn6412 Firmware Version-
   Qualcomm ≫ Qcn6412 Version-
Qualcomm ≫ Qcn6422 Firmware Version-
   Qualcomm ≫ Qcn6422 Version-
Qualcomm ≫ Qcn6432 Firmware Version-
   Qualcomm ≫ Qcn6432 Version-
Qualcomm ≫ Qcn9000 Firmware Version-
   Qualcomm ≫ Qcn9000 Version-
Qualcomm ≫ Qcn9012 Firmware Version-
   Qualcomm ≫ Qcn9012 Version-
Qualcomm ≫ Qcn9013 Firmware Version-
   Qualcomm ≫ Qcn9013 Version-
Qualcomm ≫ Qcn9024 Firmware Version-
   Qualcomm ≫ Qcn9024 Version-
Qualcomm ≫ Qcn9074 Firmware Version-
   Qualcomm ≫ Qcn9074 Version-
Qualcomm ≫ Qcn9160 Firmware Version-
   Qualcomm ≫ Qcn9160 Version-
Qualcomm ≫ Qcn9274 Firmware Version-
   Qualcomm ≫ Qcn9274 Version-
Qualcomm ≫ Qxm8083 Firmware Version-
   Qualcomm ≫ Qxm8083 Version-
Qualcomm ≫ Sd 8 Gen1 5g Firmware Version-
   Qualcomm ≫ Sd 8 Gen1 5g Version-
Qualcomm ≫ Sdm429w Firmware Version-
   Qualcomm ≫ Sdm429w Version-
Qualcomm ≫ Sdx65m Firmware Version-
   Qualcomm ≫ Sdx65m Version-
Qualcomm ≫ Ssg2115p Firmware Version-
   Qualcomm ≫ Ssg2115p Version-
Qualcomm ≫ Ssg2125p Firmware Version-
   Qualcomm ≫ Ssg2125p Version-
Qualcomm ≫ Sxr1230p Firmware Version-
   Qualcomm ≫ Sxr1230p Version-
Qualcomm ≫ Sxr2230p Firmware Version-
   Qualcomm ≫ Sxr2230p Version-
Qualcomm ≫ Sxr2250p Firmware Version-
   Qualcomm ≫ Sxr2250p Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcn3620 Firmware Version-
   Qualcomm ≫ Wcn3620 Version-
Qualcomm ≫ Wcn3660b Firmware Version-
   Qualcomm ≫ Wcn3660b Version-
Qualcomm ≫ Wcn3680b Firmware Version-
   Qualcomm ≫ Wcn3680b Version-
Qualcomm ≫ Wcn3980 Firmware Version-
   Qualcomm ≫ Wcn3980 Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8832 Firmware Version-
   Qualcomm ≫ Wsa8832 Version-
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.223
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
product-security@qualcomm.com 6.5 2 4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE-1262 Improper Access Control for Register Interface

The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.