CVE-2023-33070
Assigner: qualcomm
Published: 2023-12-05T03:04:12.248Z
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: Snapdragon Auto
Snapdragon Consumer IOT
Snapdragon Industrial IOT
Snapdragon Mobile
Snapdragon Wearables
product: Snapdragon
vendor: Qualcomm, Inc.
versions: status: affected
version: AQT1000
status: affected
version: AR8031
status: affected
version: AR8035
status: affected
version: C-V2X 9150
status: affected
version: CSRA6620
status: affected
version: CSRA6640
status: affected
version: CSRB31024
status: affected
version: FastConnect 6200
status: affected
version: QAM8255P
status: affected
version: QAM8295P
status: affected
version: QAM8775P
status: affected
version: QCA6174A
status: affected
version: QCA6310
status: affected
version: QCA6335
status: affected
version: QCA6391
status: affected
version: QCA6420
status: affected
version: QCA6430
status: affected
version: QCA6564
status: affected
version: QCA6564AU
status: affected
version: QCA6574
status: affected
version: QCA6574A
status: affected
version: QCA6574AU
status: affected
version: QCA6595
status: affected
version: QCA6595AU
status: affected
version: QCA6696
status: affected
version: QCA6698AQ
status: affected
version: QCA8337
status: affected
version: QCA9377
status: affected
version: QCM6125
status: affected
version: QCN9074
status: affected
version: QCS410
status: affected
version: QCS610
status: affected
version: QCS6125
status: affected
version: QCS8155
status: affected
version: Qualcomm 205 Mobile Platform
status: affected
version: Qualcomm 215 Mobile Platform
status: affected
version: Qualcomm Video Collaboration VC1 Platform
status: affected
version: Qualcomm Video Collaboration VC3 Platform
status: affected
version: Robotics RB3 Platform
status: affected
version: SA6145P
status: affected
version: SA6150P
status: affected
version: SA6155
status: affected
version: SA6155P
status: affected
version: SA8145P
status: affected
version: SA8150P
status: affected
version: SA8155
status: affected
version: SA8155P
status: affected
version: SA8195P
status: affected
version: SA8255P
status: affected
version: SA8295P
status: affected
version: SA8540P
status: affected
version: SA8770P
status: affected
version: SA8775P
status: affected
version: SA9000P
status: affected
version: SD 675
status: affected
version: SD660
status: affected
version: SD675
status: affected
version: SD730
status: affected
version: SD855
status: affected
version: SDM429W
status: affected
version: SDX55
status: affected
version: Smart Audio 400 Platform
status: affected
version: Snapdragon 210 Processor
status: affected
version: Snapdragon 212 Mobile Platform
status: affected
version: Snapdragon 429 Mobile Platform
status: affected
version: Snapdragon 660 Mobile Platform
status: affected
version: Snapdragon 665 Mobile Platform
status: affected
version: Snapdragon 675 Mobile Platform
status: affected
version: Snapdragon 678 Mobile Platform (SM6150-AC)
status: affected
version: Snapdragon 730 Mobile Platform (SM7150-AA)
status: affected
version: Snapdragon 730G Mobile Platform (SM7150-AB)
status: affected
version: Snapdragon 732G Mobile Platform (SM7150-AC)
status: affected
version: Snapdragon 845 Mobile Platform
status: affected
version: Snapdragon 855 Mobile Platform
status: affected
version: Snapdragon 855+/860 Mobile Platform (SM8150-AC)
status: affected
version: Snapdragon Auto 5G Modem-RF
status: affected
version: Snapdragon Wear 4100+ Platform
status: affected
version: Snapdragon X24 LTE Modem
status: affected
version: Snapdragon Auto 4G Modem
status: affected
version: Vision Intelligence 300 Platform
status: affected
version: Vision Intelligence 400 Platform
status: affected
version: WCD9326
status: affected
version: WCD9335
status: affected
version: WCD9340
status: affected
version: WCD9341
status: affected
version: WCD9360
status: affected
version: WCD9370
status: affected
version: WCD9371
status: affected
version: WCD9375
status: affected
version: WCN3610
status: affected
version: WCN3615
status: affected
version: WCN3620
status: affected
version: WCN3660B
status: affected
version: WCN3680
status: affected
version: WCN3680B
status: affected
version: WCN3950
status: affected
version: WCN3980
status: affected
version: WCN3990
status: affected
version: WSA8810
status: affected
version: WSA8815
descriptions: value: Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
title: Improper Authentication in Automotive OS
problemTypes: descriptions: cweId: CWE-287
description: CWE-287 Improper Authentication
type: CWE