CVE-2023-43551: Qualcomm, Inc. Snapdragon, заобикаляне на вход и права

Описание

Оригинално описание

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

Засегнати продукти

• Qualcomm, Inc. Snapdragon: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; APQ8017; APQ8037; AQT1000; AR6003; AR8035; C-V2X 9150; CSRA6620; CSRA6640; CSRB31024; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; MDM8207; MDM9205S; MDM9230; MDM9250; MDM9330; MDM9615; MDM9628; MDM9630; MDM9640; MSM8108; MSM8209; MSM8608; MSM8909W; MSM8996AU; QCA4004; QCA6174; QCA6174A; QCA6310; QCA6320; QCA6335; QCA6391; QCA6420; QCA6421; QCA6426; QCA6430; QCA6431; QCA6436; QCA6564A; QCA6564AU; QCA6574; QCA6574A; QCA6574AU; QCA6584; QCA6584AU; QCA6595AU; QCA6696; QCA6698AQ; QCA8081; QCA8337; QCA9367; QCA9377; QCC710; QCM2290; QCM4290; QCM4325; QCM4490; QCM5430; QCM6125; QCM6490; QCM8550; QCN6024; QCN6224; QCN6274; QCN9024; QCS2290; QCS410; QCS4290; QCS4490; QCS5430; QCS610; QCS6125; QCS6490; QCS8550; QFW7114; QFW7124; QTS110; Qualcomm 205 Mobile Platform; Qualcomm 215 Mobile Platform; Qualcomm Video Collaboration VC1 Platform; Qualcomm Video Collaboration VC3 Platform; Robotics RB3 Platform; SC8180X+SDX55; SD 455; SD 675; SD626; SD660; SD670; SD675; SD730; SD820; SD835; SD855; SD865 5G; SD888; SDM429W; SDX55; SDX57M; SG4150P; SG8275P; SM6250; SM6250P; SM7250P; SM7315; SM7325P; SM8550P; Smart Audio 200 Platform; Smart Audio 400 Platform; Smart Display 200 Platform (APQ5053-AA); Snapdragon 1100 Wearable Platform; Snapdragon 1200 Wearable Platform; Snapdragon 208 Processor; Snapdragon 210 Processor; Snapdragon 212 Mobile Platform; Snapdragon 4 Gen 1 Mobile Platform; Snapdragon 425 Mobile Platform; Snapdragon 429 Mobile Platform; Snapdragon 430 Mobile Platform; Snapdragon 439 Mobile Platform; Snapdragon 460 Mobile Platform; Snapdragon 480 5G Mobile Platform; Snapdragon 480+ 5G Mobile Platform (SM4350-AC); Snapdragon 630 Mobile Platform; Snapdragon 636 Mobile Platform; Snapdragon 660 Mobile Platform; Snapdragon 662 Mobile Platform; Snapdragon 665 Mobile Platform; Snapdragon 670 Mobile Platform; Snapdragon 675 Mobile Platform; Snapdragon 678 Mobile Platform (SM6150-AC); Snapdragon 680 4G Mobile Platform; Snapdragon 685 4G Mobile Platform (SM6225-AD); Snapdragon 690 5G Mobile Platform; Snapdragon 695 5G Mobile Platform; Snapdragon 710 Mobile Platform; Snapdragon 712 Mobile Platform; Snapdragon 720G Mobile Platform; Snapdragon 730 Mobile Platform (SM7150-AA); Snapdragon 730G Mobile Platform (SM7150-AB); Snapdragon 732G Mobile Platform (SM7150-AC); Snapdragon 750G 5G Mobile Platform; Snapdragon 765 5G Mobile Platform (SM7250-AA); Snapdragon 765G 5G Mobile Platform (SM7250-AB); Snapdragon 768G 5G Mobile Platform (SM7250-AC); Snapdragon 778G 5G Mobile Platform; Snapdragon 778G+ 5G Mobile Platform (SM7325-AE); Snapdragon 780G 5G Mobile Platform; Snapdragon 782G Mobile Platform (SM7325-AF); Snapdragon 7c Compute Platform (SC7180-AC); Snapdragon 7c Gen 2 Compute Platform (SC7180-AD) "Rennell Pro"; Snapdragon 7c+ Gen 3 Compute; Snapdragon 8 Gen 1 Mobile Platform; Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8+ Gen 1 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 820 Automotive Platform; Snapdragon 835 Mobile PC Platform; Snapdragon 845 Mobile Platform; Snapdragon 850 Mobile Compute Platform; Snapdragon 855 Mobile Platform; Snapdragon 855+/860 Mobile Platform (SM8150-AC); Snapdragon 865 5G Mobile Platform; Snapdragon 865+ 5G Mobile Platform (SM8250-AB); Snapdragon 870 5G Mobile Platform (SM8250-AC); Snapdragon 888 5G Mobile Platform; Snapdragon 888+ 5G Mobile Platform (SM8350-AC); Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite"; Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite"; Snapdragon 8cx Compute Platform (SC8180X-AA, AB); Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro"; Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro"; Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB); Snapdragon Auto 5G Modem-RF; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon W5+ Gen 1 Wearable Platform; Snapdragon Wear 1300 Platform; Snapdragon Wear 2100 Platform; Snapdragon Wear 2500 Platform; Snapdragon Wear 3100 Platform; Snapdragon Wear 4100+ Platform; Snapdragon X12 LTE Modem; Snapdragon X24 LTE Modem; Snapdragon X5 LTE Modem; Snapdragon X50 5G Modem-RF System; Snapdragon X55 5G Modem-RF System; Snapdragon X65 5G Modem-RF System; Snapdragon X70 Modem-RF System; Snapdragon X75 5G Modem-RF System; Snapdragon XR1 Platform; Snapdragon XR2 5G Platform; Snapdragon Auto 4G Modem; SW5100; SW5100P; SXR1120; SXR2130; Vision Intelligence 100 Platform (APQ8053-AA); Vision Intelligence 200 Platform (APQ8053-AC); Vision Intelligence 300 Platform; Vision Intelligence 400 Platform; WCD9306; WCD9326; WCD9330; WCD9335; WCD9340; WCD9341; WCD9360; WCD9370; WCD9371; WCD9375; WCD9380; WCD9385; WCD9390; WCD9395; WCN3610; WCN3615; WCN3620; WCN3660B; WCN3680; WCN3680B; WCN3910; WCN3950; WCN3980; WCN3988; WCN3990; WCN6740; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H
• qualcomm: още 101 продукта, добавени от qualcomm

  315_5g_iot_modem_firmware, 9205_lte_modem_firmware, 9206_lte_modem_firmware, 9207_lte_modem_firmware, apq8017_firmware, apq8037_firmware, aqt1000_firmware, ar6003_firmware, ar8035_firmware, c-v2x_9150_firmware, csra6620_firmware, csra6640_firmware, csrb31024_firmware, fastconnect_6200_firmware, fastconnect_6700_firmware, fastconnect_6800_firmware, fastconnect_6900_firmware, fastconnect_7800_firmware, mdm8207_firmware, mdm9205s_firmware, mdm9230_firmware, mdm9250_firmware, mdm9330_firmware, mdm9615_firmware, mdm9628_firmware, mdm9630_firmware, mdm9640_firmware, msm8108_firmware, msm8209_firmware, msm8608_firmware, msm8909w_firmware, msm8996au_firmware, qca4004_firmware, qca6174_firmware, qca6174a_firmware, qca6310_firmware, qca6320_firmware, qca6335_firmware, qca6391_firmware, qca6420_firmware, qca6421_firmware, qca6426_firmware, qca6430_firmware, qca6431_firmware, qca6436_firmware, qca6564a_firmware, qca6564au_firmware, qca6574_firmware, qca6574a_firmware, qca6574au_firmware, qca6584_firmware, qca6584au_firmware, qca6595au_firmware, qca6696_firmware, qca6698aq_firmware, qca8081_firmware, qca8337_firmware, qca9367_firmware, qca9377_firmware, qcc710_firmware, qcm2290_firmware, qcm4290_firmware, qcm4325_firmware, qcm4490_firmware, qcm5430_firmware, qcm6125_firmware, qcm6490_firmware, qcm8550_firmware, qcn6024_firmware, qcn6224_firmware, qcn6274_firmware, qcn9024_firmware, qcs2290_firmware, qcs410_firmware, qcs4290_firmware, qcs4490_firmware, qcs5430_firmware, qcs610_firmware, qcs6125_firmware, qcs6490_firmware, qcs8550_firmware, qfw7114_firmware, qfw7124_firmware, qts110_firmware, qualcomm_205_mobile_platform_firmware, qualcomm_215_mobile_platform_firmware, qualcomm_video_collaboration_vc1_platform_firmware, qualcomm_video_collaboration_vc3_platform_firmware, robotics_rb3_platform_firmware, sd_455_firmware, sd_675_firmware, sd626_firmware, sd660_firmware, sd670_firmware, sd675_firmware, sd730_firmware, sd820_firmware, sd835_firmware, sd855_firmware, sd865_5g_firmware, sd888_firmware

Вид слабост

• CWE-287 Неправилна автентикация

История

Други уязвимости в Qualcomm, Inc. Snapdragon

• 7.8CVE-2026-57559
• 7.8CVE-2026-57555
• 7.8CVE-2026-57554
• 7.5CVE-2026-57546
• 7.8CVE-2026-57545

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-43551
• https://nvd.nist.gov/vuln/detail/CVE-2023-43551
• https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html