CVE-2019-2289
Description
Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130
Affected products
57- Qualcomm, Inc./Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearablesv5Range: APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130
- cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm915_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8976_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qcm2150_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sc8180x_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm850_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8939_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.