CVE-2024-23358

HIGH EPSS 17.6%
Published Sep 2, 20241y ago ยท Modified Jun 17, 20261w ago
7.5 CVSS 3.1
High
Find Similar
Published Sep 2, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.

CVSS Details

Base Score
7.5
Exploitability
3.9
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
17.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-126

Affected Products 106

VendorProductVersionRange
qualcommapq8017_firmware*any
qualcommapq8017*any
qualcommapq8037_firmware*any
qualcommapq8037*any
qualcommar8035_firmware*any
qualcommar8035*any
qualcommfastconnect_7800_firmware*any
qualcommfastconnect_7800*any
qualcommmsm8108_firmware*any
qualcommmsm8108*any
qualcommmsm8209_firmware*any
qualcommmsm8209*any
qualcommmsm8608_firmware*any
qualcommmsm8608*any
qualcommqca6584au_firmware*any
qualcommqca6584au*any
qualcommqca6698aq_firmware*any
qualcommqca6698aq*any
qualcommqca8081_firmware*any
qualcommqca8081*any
qualcommqca8337_firmware*any
qualcommqca8337*any
qualcommqcc710_firmware*any
qualcommqcc710*any
qualcommqcn6224_firmware*any
qualcommqcn6224*any
qualcommqcn6274_firmware*any
qualcommqcn6274*any
qualcommqfw7114_firmware*any
qualcommqfw7114*any
qualcommqfw7124_firmware*any
qualcommqfw7124*any
qualcomm205_mobile_platform_firmware*any
qualcomm205_mobile_platform*any
qualcommsdm429w_firmware*any
qualcommsdm429w*any
qualcommsm8635_firmware*any
qualcommsm8635*any
qualcommsmart_audio_200_platform_firmware*any
qualcommsmart_audio_200_platform*any
qualcommsnapdragon_208_processor_firmware*any
qualcommsnapdragon_208_processor*any
qualcommsnapdragon_210_processor_firmware*any
qualcommsnapdragon_210_processor*any
qualcommsnapdragon_212_mobile_platform_firmware*any
qualcommsnapdragon_212_mobile_platform*any
qualcommsnapdragon_425_mobile_platform_firmware*any
qualcommsnapdragon_425_mobile_platform*any
qualcommsnapdragon_429_mobile_platform_firmware*any
qualcommsnapdragon_429_mobile_platform*any
qualcommsnapdragon_430_mobile_platform_firmware*any
qualcommsnapdragon_430_mobile_platform*any
qualcommsnapdragon_439_mobile_platform_firmware*any
qualcommsnapdragon_439_mobile_platform*any
qualcommsnapdragon_8_gen_3_mobile_platform_firmware*any
qualcommsnapdragon_8_gen_3_mobile_platform*any
qualcommsnapdragon_auto_5g_modem-rf_gen_2_firmware*any
qualcommsnapdragon_auto_5g_modem-rf_gen_2*any
qualcommsnapdragon_wear_4100\+_platform_firmware*any
qualcommsnapdragon_wear_4100\+_platform*any
qualcommsnapdragon_x72_5g_modem-rf_system_firmware*any
qualcommsnapdragon_x72_5g_modem-rf_system*any
qualcommsnapdragon_x75_5g_modem-rf_system_firmware*any
qualcommsnapdragon_x75_5g_modem-rf_system*any
qualcommwcd9326_firmware*any
qualcommwcd9326*any
qualcommwcd9340_firmware*any
qualcommwcd9340*any
qualcommwcd9370_firmware*any
qualcommwcd9370*any
qualcommwcd9375_firmware*any
qualcommwcd9375*any
qualcommwcd9390_firmware*any
qualcommwcd9390*any
qualcommwcd9395_firmware*any
qualcommwcd9395*any
qualcommwcn3610_firmware*any
qualcommwcn3610*any
qualcommwcn3615_firmware*any
qualcommwcn3615*any
qualcommwcn3620_firmware*any
qualcommwcn3620*any
qualcommwcn3660b_firmware*any
qualcommwcn3660b*any
qualcommwcn3680b_firmware*any
qualcommwcn3680b*any
qualcommwcn3980_firmware*any
qualcommwcn3980*any
qualcommwcn6755_firmware*any
qualcommwcn6755*any
qualcommwsa8810_firmware*any
qualcommwsa8810*any
qualcommwsa8815_firmware*any
qualcommwsa8815*any
qualcommwsa8830_firmware*any
qualcommwsa8830*any
qualcommwsa8832_firmware*any
qualcommwsa8832*any
qualcommwsa8835_firmware*any
qualcommwsa8835*any
qualcommwsa8840_firmware*any
qualcommwsa8840*any
qualcommwsa8845_firmware*any
qualcommwsa8845*any
qualcommwsa8845h_firmware*any
qualcommwsa8845h*any

References 1

  • docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.