Vulnerability Name:

CVE-2021-1956 (CCN-209128)

Assigned:2020-12-08
Published:2021-09-06
Updated:2021-09-22
Summary:Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS v3 Severity:6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Adjacent
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Adjacent
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:3.3 Low (CVSS v2 Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Adjacent_Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
6.1 Medium (CCN CVSS v2 Vector: AV:A/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Adjacent_Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2021-1956

Source: XF
Type: UNKNOWN
qualcomm-cve20211956-dos(209128)

Source: CCN
Type: Qualcomm Web site
September 2021 Security Bulletin

Source: CONFIRM
Type: Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin

Vulnerable Configuration:Configuration 1:
  • cpe:/o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:ar8035:-:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:csrb31024:-:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/o:qualcomm:qca6175a_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6175a:-:*:*:*:*:*:*:*

    • Configuration 5:
  • cpe:/o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6390:-:*:*:*:*:*:*:*

    • Configuration 6:
  • cpe:/o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6391:-:*:*:*:*:*:*:*

    • Configuration 7:
  • cpe:/o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6420:-:*:*:*:*:*:*:*

    • Configuration 8:
  • cpe:/o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6430:-:*:*:*:*:*:*:*

    • Configuration 9:
  • cpe:/o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6564a:-:*:*:*:*:*:*:*

    • Configuration 10:
  • cpe:/o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

    • Configuration 11:
  • cpe:/o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6574:-:*:*:*:*:*:*:*

    • Configuration 12:
  • cpe:/o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

    • Configuration 13:
  • cpe:/o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

    • Configuration 14:
  • cpe:/o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6584au:-:*:*:*:*:*:*:*

    • Configuration 15:
  • cpe:/o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6595:-:*:*:*:*:*:*:*

    • Configuration 16:
  • cpe:/o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

    • Configuration 17:
  • cpe:/o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6696:-:*:*:*:*:*:*:*

    • Configuration 18:
  • cpe:/o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca8337:-:*:*:*:*:*:*:*

    • Configuration 19:
  • cpe:/o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcn7605:-:*:*:*:*:*:*:*

    • Configuration 20:
  • cpe:/o:qualcomm:qcn7606_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcn7606:-:*:*:*:*:*:*:*

    • Configuration 21:
  • cpe:/o:qualcomm:qcx315_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcx315:-:*:*:*:*:*:*:*

    • Configuration 22:
  • cpe:/o:qualcomm:sa415m_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa415m:-:*:*:*:*:*:*:*

    • Configuration 23:
  • cpe:/o:qualcomm:sa515m_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa515m:-:*:*:*:*:*:*:*

    • Configuration 24:
  • cpe:/o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa6145p:-:*:*:*:*:*:*:*

    • Configuration 25:
  • cpe:/o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa6150p:-:*:*:*:*:*:*:*

    • Configuration 26:
  • cpe:/o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa6155:-:*:*:*:*:*:*:*

    • Configuration 27:
  • cpe:/o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

    • Configuration 28:
  • cpe:/o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8145p:-:*:*:*:*:*:*:*

    • Configuration 29:
  • cpe:/o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8150p:-:*:*:*:*:*:*:*

    • Configuration 30:
  • cpe:/o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8155:-:*:*:*:*:*:*:*

    • Configuration 31:
  • cpe:/o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8155p:-:*:*:*:*:*:*:*

    • Configuration 32:
  • cpe:/o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8195p:-:*:*:*:*:*:*:*

    • Configuration 33:
  • cpe:/o:qualcomm:sc8180x+sdx55_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sc8180x+sdx55:-:*:*:*:*:*:*:*

    • Configuration 34:
  • cpe:/o:qualcomm:sd_8c_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd_8c:-:*:*:*:*:*:*:*

    • Configuration 35:
  • cpe:/o:qualcomm:sd_8cx_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd_8cx:-:*:*:*:*:*:*:*

    • Configuration 36:
  • cpe:/o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55:-:*:*:*:*:*:*:*

    • Configuration 37:
  • cpe:/o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

    • Configuration 38:
  • cpe:/o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9341:-:*:*:*:*:*:*:*

    • Configuration 39:
  • cpe:/o:qualcomm:wcd9360_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9360:-:*:*:*:*:*:*:*

    • Configuration 40:
  • cpe:/o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3998:-:*:*:*:*:*:*:*

    • Configuration 41:
  • cpe:/o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

    • Configuration 42:
  • cpe:/o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:qualcomm:snapdragon_mobile:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_auto:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_compute:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_connectivity:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_consumer_electronics_connectivity:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_industrial_internet_of_things:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_voice_&_music:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    qualcomm aqt1000 firmware -
    qualcomm aqt1000 -
    qualcomm ar8035 firmware -
    qualcomm ar8035 -
    qualcomm csrb31024 firmware -
    qualcomm csrb31024 -
    qualcomm qca6175a firmware -
    qualcomm qca6175a -
    qualcomm qca6390 firmware -
    qualcomm qca6390 -
    qualcomm qca6391 firmware -
    qualcomm qca6391 -
    qualcomm qca6420 firmware -
    qualcomm qca6420 -
    qualcomm qca6430 firmware -
    qualcomm qca6430 -
    qualcomm qca6564a firmware -
    qualcomm qca6564a -
    qualcomm qca6564au firmware -
    qualcomm qca6564au -
    qualcomm qca6574 firmware -
    qualcomm qca6574 -
    qualcomm qca6574a firmware -
    qualcomm qca6574a -
    qualcomm qca6574au firmware -
    qualcomm qca6574au -
    qualcomm qca6584au firmware -
    qualcomm qca6584au -
    qualcomm qca6595 firmware -
    qualcomm qca6595 -
    qualcomm qca6595au firmware -
    qualcomm qca6595au -
    qualcomm qca6696 firmware -
    qualcomm qca6696 -
    qualcomm qca8337 firmware -
    qualcomm qca8337 -
    qualcomm qcn7605 firmware -
    qualcomm qcn7605 -
    qualcomm qcn7606 firmware -
    qualcomm qcn7606 -
    qualcomm qcx315 firmware -
    qualcomm qcx315 -
    qualcomm sa415m firmware -
    qualcomm sa415m -
    qualcomm sa515m firmware -
    qualcomm sa515m -
    qualcomm sa6145p firmware -
    qualcomm sa6145p -
    qualcomm sa6150p firmware -
    qualcomm sa6150p -
    qualcomm sa6155 firmware -
    qualcomm sa6155 -
    qualcomm sa6155p firmware -
    qualcomm sa6155p -
    qualcomm sa8145p firmware -
    qualcomm sa8145p -
    qualcomm sa8150p firmware -
    qualcomm sa8150p -
    qualcomm sa8155 firmware -
    qualcomm sa8155 -
    qualcomm sa8155p firmware -
    qualcomm sa8155p -
    qualcomm sa8195p firmware -
    qualcomm sa8195p -
    qualcomm sc8180x+sdx55 firmware -
    qualcomm sc8180x+sdx55 -
    qualcomm sd 8c firmware -
    qualcomm sd 8c -
    qualcomm sd 8cx firmware -
    qualcomm sd 8cx -
    qualcomm sdx55 firmware -
    qualcomm sdx55 -
    qualcomm wcd9340 firmware -
    qualcomm wcd9340 -
    qualcomm wcd9341 firmware -
    qualcomm wcd9341 -
    qualcomm wcd9360 firmware -
    qualcomm wcd9360 -
    qualcomm wcn3998 firmware -
    qualcomm wcn3998 -
    qualcomm wsa8810 firmware -
    qualcomm wsa8810 -
    qualcomm wsa8815 firmware -
    qualcomm wsa8815 -
    qualcomm snapdragon mobile -
    qualcomm snapdragon auto -
    qualcomm snapdragon compute -
    qualcomm snapdragon connectivity -
    qualcomm snapdragon consumer electronics connectivity -
    qualcomm snapdragon industrial internet of things -
    qualcomm snapdragon voice & music -