Vulnerability Name:

CVE-2021-35113 (CCN-235240)

Assigned:2021-06-21
Published:2022-08-01
Updated:2022-09-08
Summary:Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS v3 Severity:6.8 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
5.9 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Physical
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)
6.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Physical
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): None
CVSS v2 Severity:6.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): None
Vulnerability Type:CWE-347
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2021-35113

Source: CCN
Type: Qualcomm Web site
August 2022 Security Bulletin

Source: XF
Type: UNKNOWN
qualcomm-cve202135113-info-disc(235240)

Source: CONFIRM
Type: Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin

Vulnerable Configuration:Configuration 1:
  • cpe:/o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:csrb31024:-:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6310:-:*:*:*:*:*:*:*

    • Configuration 5:
  • cpe:/o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6335:-:*:*:*:*:*:*:*

    • Configuration 6:
  • cpe:/o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6420:-:*:*:*:*:*:*:*

    • Configuration 7:
  • cpe:/o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6430:-:*:*:*:*:*:*:*

    • Configuration 8:
  • cpe:/o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

    • Configuration 9:
  • cpe:/o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

    • Configuration 10:
  • cpe:/o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

    • Configuration 11:
  • cpe:/o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6696:-:*:*:*:*:*:*:*

    • Configuration 12:
  • cpe:/o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca9377:-:*:*:*:*:*:*:*

    • Configuration 13:
  • cpe:/o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs410:-:*:*:*:*:*:*:*

    • Configuration 14:
  • cpe:/o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs610:-:*:*:*:*:*:*:*

    • Configuration 15:
  • cpe:/o:qualcomm:sa415m_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa415m:-:*:*:*:*:*:*:*

    • Configuration 16:
  • cpe:/o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd_675:-:*:*:*:*:*:*:*

    • Configuration 17:
  • cpe:/o:qualcomm:sd429_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd429:-:*:*:*:*:*:*:*

    • Configuration 18:
  • cpe:/o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd675:-:*:*:*:*:*:*:*

    • Configuration 19:
  • cpe:/o:qualcomm:sd678_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd678:-:*:*:*:*:*:*:*

    • Configuration 20:
  • cpe:/o:qualcomm:sd720g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd720g:-:*:*:*:*:*:*:*

    • Configuration 21:
  • cpe:/o:qualcomm:sd730_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd730:-:*:*:*:*:*:*:*

    • Configuration 22:
  • cpe:/o:qualcomm:sd7c_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd7c:-:*:*:*:*:*:*:*

    • Configuration 23:
  • cpe:/o:qualcomm:sd845_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd845:-:*:*:*:*:*:*:*

    • Configuration 24:
  • cpe:/o:qualcomm:sd850_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd850:-:*:*:*:*:*:*:*

    • Configuration 25:
  • cpe:/o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd855:-:*:*:*:*:*:*:*

    • Configuration 26:
  • cpe:/o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdm429w:-:*:*:*:*:*:*:*

    • Configuration 27:
  • cpe:/o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx24:-:*:*:*:*:*:*:*

    • Configuration 28:
  • cpe:/o:qualcomm:sdx50m_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx50m:-:*:*:*:*:*:*:*

    • Configuration 29:
  • cpe:/o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55:-:*:*:*:*:*:*:*

    • Configuration 30:
  • cpe:/o:qualcomm:sdx55m_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55m:-:*:*:*:*:*:*:*

    • Configuration 31:
  • cpe:/o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm6250:-:*:*:*:*:*:*:*

    • Configuration 32:
  • cpe:/o:qualcomm:sm6250p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm6250p:-:*:*:*:*:*:*:*

    • Configuration 33:
  • cpe:/o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

    • Configuration 34:
  • cpe:/o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9341:-:*:*:*:*:*:*:*

    • Configuration 35:
  • cpe:/o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

    • Configuration 36:
  • cpe:/o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9371:-:*:*:*:*:*:*:*

    • Configuration 37:
  • cpe:/o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9375:-:*:*:*:*:*:*:*

    • Configuration 38:
  • cpe:/o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

    • Configuration 39:
  • cpe:/o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3620:-:*:*:*:*:*:*:*

    • Configuration 40:
  • cpe:/o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

    • Configuration 41:
  • cpe:/o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3950:-:*:*:*:*:*:*:*

    • Configuration 42:
  • cpe:/o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

    • Configuration 43:
  • cpe:/o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

    • Configuration 44:
  • cpe:/o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3990:-:*:*:*:*:*:*:*

    • Configuration 45:
  • cpe:/o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3991:-:*:*:*:*:*:*:*

    • Configuration 46:
  • cpe:/o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3998:-:*:*:*:*:*:*:*

    • Configuration 47:
  • cpe:/o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

    • Configuration 48:
  • cpe:/o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:qualcomm:snapdragon_mobile:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_auto:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_compute:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_consumer_internet_of_things:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_industrial_internet_of_things:-:*:*:*:*:*:*:*
  • OR cpe:/o:qualcomm:snapdragon_wearables:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    qualcomm aqt1000 firmware -
    qualcomm aqt1000 -
    qualcomm csrb31024 firmware -
    qualcomm csrb31024 -
    qualcomm qca6174a firmware -
    qualcomm qca6174a -
    qualcomm qca6310 firmware -
    qualcomm qca6310 -
    qualcomm qca6335 firmware -
    qualcomm qca6335 -
    qualcomm qca6420 firmware -
    qualcomm qca6420 -
    qualcomm qca6430 firmware -
    qualcomm qca6430 -
    qualcomm qca6564au firmware -
    qualcomm qca6564au -
    qualcomm qca6574au firmware -
    qualcomm qca6574au -
    qualcomm qca6595au firmware -
    qualcomm qca6595au -
    qualcomm qca6696 firmware -
    qualcomm qca6696 -
    qualcomm qca9377 firmware -
    qualcomm qca9377 -
    qualcomm qcs410 firmware -
    qualcomm qcs410 -
    qualcomm qcs610 firmware -
    qualcomm qcs610 -
    qualcomm sa415m firmware -
    qualcomm sa415m -
    qualcomm sd 675 firmware -
    qualcomm sd 675 -
    qualcomm sd429 firmware -
    qualcomm sd429 -
    qualcomm sd675 firmware -
    qualcomm sd675 -
    qualcomm sd678 firmware -
    qualcomm sd678 -
    qualcomm sd720g firmware -
    qualcomm sd720g -
    qualcomm sd730 firmware -
    qualcomm sd730 -
    qualcomm sd7c firmware -
    qualcomm sd7c -
    qualcomm sd845 firmware -
    qualcomm sd845 -
    qualcomm sd850 firmware -
    qualcomm sd850 -
    qualcomm sd855 firmware -
    qualcomm sd855 -
    qualcomm sdm429w firmware -
    qualcomm sdm429w -
    qualcomm sdx24 firmware -
    qualcomm sdx24 -
    qualcomm sdx50m firmware -
    qualcomm sdx50m -
    qualcomm sdx55 firmware -
    qualcomm sdx55 -
    qualcomm sdx55m firmware -
    qualcomm sdx55m -
    qualcomm sm6250 firmware -
    qualcomm sm6250 -
    qualcomm sm6250p firmware -
    qualcomm sm6250p -
    qualcomm wcd9340 firmware -
    qualcomm wcd9340 -
    qualcomm wcd9341 firmware -
    qualcomm wcd9341 -
    qualcomm wcd9370 firmware -
    qualcomm wcd9370 -
    qualcomm wcd9371 firmware -
    qualcomm wcd9371 -
    qualcomm wcd9375 firmware -
    qualcomm wcd9375 -
    qualcomm wcd9380 firmware -
    qualcomm wcd9380 -
    qualcomm wcn3620 firmware -
    qualcomm wcn3620 -
    qualcomm wcn3660b firmware -
    qualcomm wcn3660b -
    qualcomm wcn3950 firmware -
    qualcomm wcn3950 -
    qualcomm wcn3980 firmware -
    qualcomm wcn3980 -
    qualcomm wcn3988 firmware -
    qualcomm wcn3988 -
    qualcomm wcn3990 firmware -
    qualcomm wcn3990 -
    qualcomm wcn3991 firmware -
    qualcomm wcn3991 -
    qualcomm wcn3998 firmware -
    qualcomm wcn3998 -
    qualcomm wsa8810 firmware -
    qualcomm wsa8810 -
    qualcomm wsa8815 firmware -
    qualcomm wsa8815 -
    qualcomm snapdragon mobile -
    qualcomm snapdragon auto -
    qualcomm snapdragon compute -
    qualcomm snapdragon consumer internet of things -
    qualcomm snapdragon industrial internet of things -
    qualcomm snapdragon wearables -