// For flags

CVE-2017-18312

 

Severity Score

7.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state transitions in Snapdragon Automobile, Snapdragon Mobile in version MSM8996AU, SD 410/12, SD 617, SD 650/52, SD 810, SD 820, SD 820A

Al acceder a los servicios SafeSwitch, los terceros pueden manipular un dispositivo determinado y realizar operaciones no autorizadas debido a la falta de comprobaciones de algunas transiciones del mismo estado en Snapdragon Automobile y Snapdragon Mobile en versiones MSM8996AU, SD 410/12, SD 617, SD 650/52, SD 810, SD 820 y SD 820A

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2018-06-15 CVE Reserved
  • 2018-10-23 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-862: Missing Authorization
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Qualcomm
Search vendor "Qualcomm"
Msm8996au Firmware
Search vendor "Qualcomm" for product "Msm8996au Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Msm8996au
Search vendor "Qualcomm" for product "Msm8996au"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 410 Firmware
Search vendor "Qualcomm" for product "Sd 410 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 410
Search vendor "Qualcomm" for product "Sd 410"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 412 Firmware
Search vendor "Qualcomm" for product "Sd 412 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 412
Search vendor "Qualcomm" for product "Sd 412"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 617 Firmware
Search vendor "Qualcomm" for product "Sd 617 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 617
Search vendor "Qualcomm" for product "Sd 617"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 650 Firmware
Search vendor "Qualcomm" for product "Sd 650 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 650
Search vendor "Qualcomm" for product "Sd 650"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 652 Firmware
Search vendor "Qualcomm" for product "Sd 652 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 652
Search vendor "Qualcomm" for product "Sd 652"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 810 Firmware
Search vendor "Qualcomm" for product "Sd 810 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 810
Search vendor "Qualcomm" for product "Sd 810"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 820 Firmware
Search vendor "Qualcomm" for product "Sd 820 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 820
Search vendor "Qualcomm" for product "Sd 820"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 820a Firmware
Search vendor "Qualcomm" for product "Sd 820a Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 820a
Search vendor "Qualcomm" for product "Sd 820a"
--
Safe