PT-2018-6799 · Qualcomm · Snapdragon Mobile

Publicado 2018-10-23 · Atualizado 2019-10-03 · CVE-2017-18282

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile versions MDM9206, MDM9607, MDM9650, SD 210, SD 212, SD 205, SD 425, SD 430, SD 450, SD 625, SD 650, SD 652, SD 835, SDA660

Description: The issue is related to non-secure software that can cause the Secure Data Control Channel (SDCC) to generate secure bus accesses. This may expose RPM access in affected devices.

Recommendations: For Qualcomm Snapdragon Mobile versions MDM9206, MDM9607, MDM9650, SD 210, SD 212, SD 205, SD 425, SD 430, SD 450, SD 625, SD 650, SD 652, SD 835, SDA660, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-18282

Produtos afetados

Snapdragon Mobile

Referências · 4

• https://source.android.com/security/bulletin/2018-08-01#qualcomm-closed-source-components · Nota
• http://securitytracker.com/id/1041432 · Nota
• https://qualcomm.com/company/product-security/bulletins · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-18282 · Nota de Segurança