CVE-2024-23364
Vulnérabilité élevée dans Snapdragon (Qualcomm, Inc.)
CVSS 7.5 · Élevée
EPSS 0.3%
Qualcomm, Inc.•Snapdragon•Versions : IPQ9008, SSG2125P, QAM8650P, QCA8337, QCN6432, IPQ9570, QAMSRV1M, QCA6431, SDX61, WSA8832, Snapdragon 865+ 5G Mobile Platform (SM8250-AB), IPQ5302, WSA8835, QCA6574A, QCC2076, QCN9000, QCA6678AQ, WCD9390, SM7315, SM8635, Qualcomm Video Collaboration VC3 Platform, SDM429W, IPQ5332, SA6155P, WCD9370, SD888, WCD9385, WSA8845, QCN6422, QCN6274, QCA6696, WSA8845H, Snapdragon 695 5G Mobile Platform, QFW7124, QAMSRV1H, Snapdragon 778G+ 5G Mobile Platform (SM7325-AE), QCS8550, QCA6574AU, SG8275P, Snapdragon 865 5G Mobile Platform, QAM8620P, Snapdragon Wear 4100+ Platform, SA8770P, Snapdragon Auto 5G Modem-RF, QCC710, QCA8084, QAM8295P, Snapdragon Auto 5G Modem-RF Gen 2, QCA2066, WCN3988, QCA6564AU, QCS6490, WCD9380, WCN3610, Snapdragon X62 5G Modem-RF System, WSA8830, QCM4490, QCN6402, QSM8250, QCN6412, WCN7880, FastConnect 7800, QEP8111, QSM8350, QCA6698AQ, QCN6224, Snapdragon 8+ Gen 1 Mobile Platform, SA8650P, SA7775P, Snapdragon 7c+ Gen 3 Compute, SSG2115P, WSA8815, QCN9160, QCA6595AU, QFW7114, Snapdragon XR2+ Gen 1 Platform, QCA8085, QCM6490, SC8380XP, QCM8550, QCA6797AQ, QCA6777AQ, QAM8255P, QCA6421, QCN9024, Snapdragon 8+ Gen 2 Mobile Platform, SM7325P, QCA6584AU, Snapdragon 888+ 5G Mobile Platform (SM8350-AC), Snapdragon X65 5G Modem-RF System, WCD9395, Snapdragon 870 5G Mobile Platform (SM8250-AC), QCN9274, QCM5430, SA7255P, WCN3950, QCS5430, WCD9340, Snapdragon X55 5G Modem-RF System, QCA2064, WCD9375, SD 8 Gen1 5G, QCF8001, Snapdragon 8 Gen 1 Mobile Platform, SA8195P, FastConnect 6200, QCA6787AQ, Snapdragon AR2 Gen 1 Platform, SXR2230P, SA8620P, SD865 5G, SM6370, QCA6174A, IPQ9554, Snapdragon 8 Gen 3 Mobile Platform, IPQ5300, Snapdragon 429 Mobile Platform, QCA6554A, FastConnect 6900, Immersive Home 326 Platform, QCA6574, WCN3680B, IPQ9574, AR8035, QCA6436, Snapdragon 4 Gen 1 Mobile Platform, QCA8075, SRV1H, QAM8775P, Snapdragon 8 Gen 2 Mobile Platform, SRV1L, SA9000P, QCA6595, QCA8386, QCN6024, QCA2065, Snapdragon X72 5G Modem-RF System, WCN6740, FastConnect 6800, WCN3620, SXR2250P, QCA6688AQ, Snapdragon 780G 5G Mobile Platform, Snapdragon 782G Mobile Platform (SM7325-AF), SA8255P, Snapdragon 888 5G Mobile Platform, SXR2130, WSA8810, WSA8840, SM8550P, Snapdragon XR2 5G Platform, Snapdragon X35 5G Modem-RF System, Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB), SDX55, SA8295P, QCA2062, QCA8082, SXR1230P, Immersive Home 3210 Platform, FastConnect 6700, SA8775P, Snapdragon 480 5G Mobile Platform, QCF8000, WCN3980, Snapdragon 778G 5G Mobile Platform, QCA8081, SA8155P, QCS4490, QCC2073, Snapdragon 480+ 5G Mobile Platform (SM4350-AC), QXM8083, SRV1M, IPQ5312, QCA6426, QCA6391, Snapdragon X75 5G Modem-RF System, WCN6755, WCN3660B
Description
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
Gravité et risque d'exploitation
CVE-2024-23364 obtient un score CVSS de 7.5/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.30 %, ce qui la place devant 21.1 % des CVE référencées.
Que faire ?
- Vérifiez si Snapdragon (versions IPQ9008, SSG2125P, QAM8650P, QCA8337, QCN6432, IPQ9570, QAMSRV1M, QCA6431, SDX61, WSA8832, Snapdragon 865+ 5G Mobile Platform (SM8250-AB), IPQ5302, WSA8835, QCA6574A, QCC2076, QCN9000, QCA6678AQ, WCD9390, SM7315, SM8635, Qualcomm Video Collaboration VC3 Platform, SDM429W, IPQ5332, SA6155P, WCD9370, SD888, WCD9385, WSA8845, QCN6422, QCN6274, QCA6696, WSA8845H, Snapdragon 695 5G Mobile Platform, QFW7124, QAMSRV1H, Snapdragon 778G+ 5G Mobile Platform (SM7325-AE), QCS8550, QCA6574AU, SG8275P, Snapdragon 865 5G Mobile Platform, QAM8620P, Snapdragon Wear 4100+ Platform, SA8770P, Snapdragon Auto 5G Modem-RF, QCC710, QCA8084, QAM8295P, Snapdragon Auto 5G Modem-RF Gen 2, QCA2066, WCN3988, QCA6564AU, QCS6490, WCD9380, WCN3610, Snapdragon X62 5G Modem-RF System, WSA8830, QCM4490, QCN6402, QSM8250, QCN6412, WCN7880, FastConnect 7800, QEP8111, QSM8350, QCA6698AQ, QCN6224, Snapdragon 8+ Gen 1 Mobile Platform, SA8650P, SA7775P, Snapdragon 7c+ Gen 3 Compute, SSG2115P, WSA8815, QCN9160, QCA6595AU, QFW7114, Snapdragon XR2+ Gen 1 Platform, QCA8085, QCM6490, SC8380XP, QCM8550, QCA6797AQ, QCA6777AQ, QAM8255P, QCA6421, QCN9024, Snapdragon 8+ Gen 2 Mobile Platform, SM7325P, QCA6584AU, Snapdragon 888+ 5G Mobile Platform (SM8350-AC), Snapdragon X65 5G Modem-RF System, WCD9395, Snapdragon 870 5G Mobile Platform (SM8250-AC), QCN9274, QCM5430, SA7255P, WCN3950, QCS5430, WCD9340, Snapdragon X55 5G Modem-RF System, QCA2064, WCD9375, SD 8 Gen1 5G, QCF8001, Snapdragon 8 Gen 1 Mobile Platform, SA8195P, FastConnect 6200, QCA6787AQ, Snapdragon AR2 Gen 1 Platform, SXR2230P, SA8620P, SD865 5G, SM6370, QCA6174A, IPQ9554, Snapdragon 8 Gen 3 Mobile Platform, IPQ5300, Snapdragon 429 Mobile Platform, QCA6554A, FastConnect 6900, Immersive Home 326 Platform, QCA6574, WCN3680B, IPQ9574, AR8035, QCA6436, Snapdragon 4 Gen 1 Mobile Platform, QCA8075, SRV1H, QAM8775P, Snapdragon 8 Gen 2 Mobile Platform, SRV1L, SA9000P, QCA6595, QCA8386, QCN6024, QCA2065, Snapdragon X72 5G Modem-RF System, WCN6740, FastConnect 6800, WCN3620, SXR2250P, QCA6688AQ, Snapdragon 780G 5G Mobile Platform, Snapdragon 782G Mobile Platform (SM7325-AF), SA8255P, Snapdragon 888 5G Mobile Platform, SXR2130, WSA8810, WSA8840, SM8550P, Snapdragon XR2 5G Platform, Snapdragon X35 5G Modem-RF System, Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB), SDX55, SA8295P, QCA2062, QCA8082, SXR1230P, Immersive Home 3210 Platform, FastConnect 6700, SA8775P, Snapdragon 480 5G Mobile Platform, QCF8000, WCN3980, Snapdragon 778G 5G Mobile Platform, QCA8081, SA8155P, QCS4490, QCC2073, Snapdragon 480+ 5G Mobile Platform (SM4350-AC), QXM8083, SRV1M, IPQ5312, QCA6426, QCA6391, Snapdragon X75 5G Modem-RF System, WCN6755, WCN3660B) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.