CVE-2017-18313

Severity Score

5.3

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored in DDR because DXE-accessible memory is located within the authenticated image in Snapdragon Mobile and Snapdragon Wear in version MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 617.

En ciertos modos de operaciones, HLOS podría ser capaz de obtener acceso directo o indirecto mediante los canales DXE para manipular el firmware WCNSS autenticado almacenado en DDR debido a que la memoria DXE accesible se ubica en la imagen autenticada en Snapdragon Mobile y Snapdragon Wear en versiones MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415 y SD 617.

*Credits: N/A

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Attack Vector

Adjacent

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Complete

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2018-06-15 CVE Reserved
2018-10-23 CVE Published
2024-08-05 CVE Updated
2024-09-01 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (2)

URL	Tag	Source
https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.qualcomm.com/company/product-security/bulletins	2019-10-03

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Qualcomm Search vendor "Qualcomm"	Msm8909w Firmware Search vendor "Qualcomm" for product "Msm8909w Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Msm8909w Search vendor "Qualcomm" for product "Msm8909w"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 210 Firmware Search vendor "Qualcomm" for product "Sd 210 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 210 Search vendor "Qualcomm" for product "Sd 210"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 212 Firmware Search vendor "Qualcomm" for product "Sd 212 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 212 Search vendor "Qualcomm" for product "Sd 212"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 205 Firmware Search vendor "Qualcomm" for product "Sd 205 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 205 Search vendor "Qualcomm" for product "Sd 205"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 410 Firmware Search vendor "Qualcomm" for product "Sd 410 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 410 Search vendor "Qualcomm" for product "Sd 410"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 412 Firmware Search vendor "Qualcomm" for product "Sd 412 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 412 Search vendor "Qualcomm" for product "Sd 412"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 615 Firmware Search vendor "Qualcomm" for product "Sd 615 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 615 Search vendor "Qualcomm" for product "Sd 615"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 616 Firmware Search vendor "Qualcomm" for product "Sd 616 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 616 Search vendor "Qualcomm" for product "Sd 616"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 415 Firmware Search vendor "Qualcomm" for product "Sd 415 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 415 Search vendor "Qualcomm" for product "Sd 415"	-	-	Safe
Qualcomm Search vendor "Qualcomm"	Sd 617 Firmware Search vendor "Qualcomm" for product "Sd 617 Firmware"	-	-	Affected	in	Qualcomm Search vendor "Qualcomm"	Sd 617 Search vendor "Qualcomm" for product "Sd 617"	-	-	Safe