by Kastro
Paper/Archive/CVE-2022-25652

CVE-2022-25652

Qualcomm, Inc. Snapdragon Wired Infrastructure and Networking — Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

EPSS 0.1%CVSS 9.0
critical.is priorityof 100
27
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 1.4.014 × 200.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

Affected

ProductAffectedFixed inSource
Snapdragon Wired Infrastructure and NetworkingCSR8811, IPQ5010, IPQ5018, IPQ5028, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, PMP8074, QCA4024, QCA6428, QCA6438, QCA8072, QCA8075, QCA8081, QCA9888, QCA9889, QCN5021, QCN5022, QCN5024, QCN5052, QCN5054, QCN5064, QCN5121, QCN5122, QCN5124, QCN5152, QCN5154, QCN5164, QCN5550, QCN6023, QCN6024, QCN6100, QCN6102, QCN6112, QCN6122, QCN6132, QCN9000, QCN9012, QCN9022, QCN9024, QCN9070, QCN9072, QCN9074, QCN9100–CNA

Scores by source

qualcomm (CNA)9.0CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

References

refqualcomm.com/company/product-security/bulletins/september-2022-bulletin