CVE DATABASE / CVE-2017-18326

CVE-2017-18326

CVSS 5.5 · MEDIUM

Summary

Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016.

CVSS 3.0 breakdown

Base score	5.5 (MEDIUM)
Vector	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector	LOCAL
Attack complexity	LOW
Privileges required	LOW
User interaction	NONE
Scope	UNCHANGED
Confidentiality	HIGH
Integrity	NONE
Availability	NONE

Weakness type (CWE)

CWE-200

Affected products

Qualcomm mdm9607 firmwareQualcomm mdm9607Qualcomm mdm9615 firmwareQualcomm mdm9615Qualcomm mdm9625 firmwareQualcomm mdm9625Qualcomm mdm9635m firmwareQualcomm mdm9635mQualcomm mdm9640 firmwareQualcomm mdm9640Qualcomm mdm9645 firmwareQualcomm mdm9645Qualcomm mdm9650 firmwareQualcomm mdm9650Qualcomm mdm9655 firmwareQualcomm mdm9655Qualcomm msm8909w firmwareQualcomm msm8909wQualcomm sd 210 firmwareQualcomm sd 210

Check this CVE live

Use our free CVE Lookup tool for the latest NVD record, or browse the full CISA KEV catalog.

References

Data: NIST NVD. NVD last modified 2024-11-21. Always verify against the vendor advisory before acting.