CVE-2023-33100

Improper input validation in Multi-Mode Call Processor

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.

DOS transitorio mientras se procesa el mensaje de transporte DL NAS cuando el ID del mensaje no está definido en la especificación 3GPP.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2023-05-17 CVE Reserved
2024-04-01 CVE Published
2024-04-02 EPSS Updated
2024-08-02 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (1)

URL	Tag	Source
https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Qualcomm Search vendor "Qualcomm"		Ar8035 Firmware Search vendor "Qualcomm" for product "Ar8035 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Fastconnect 6700 Firmware Search vendor "Qualcomm" for product "Fastconnect 6700 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Fastconnect 6900 Firmware Search vendor "Qualcomm" for product "Fastconnect 6900 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Fastconnect 7800 Firmware Search vendor "Qualcomm" for product "Fastconnect 7800 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qca6174a Firmware Search vendor "Qualcomm" for product "Qca6174a Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qca6584au Firmware Search vendor "Qualcomm" for product "Qca6584au Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qca6698aq Firmware Search vendor "Qualcomm" for product "Qca6698aq Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qca8081 Firmware Search vendor "Qualcomm" for product "Qca8081 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qca8337 Firmware Search vendor "Qualcomm" for product "Qca8337 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qcc710 Firmware Search vendor "Qualcomm" for product "Qcc710 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qcm4490 Firmware Search vendor "Qualcomm" for product "Qcm4490 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qcm8550 Firmware Search vendor "Qualcomm" for product "Qcm8550 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qcn6024 Firmware Search vendor "Qualcomm" for product "Qcn6024 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qcn6224 Firmware Search vendor "Qualcomm" for product "Qcn6224 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qcn6274 Firmware Search vendor "Qualcomm" for product "Qcn6274 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qcn9024 Firmware Search vendor "Qualcomm" for product "Qcn9024 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qcs4490 Firmware Search vendor "Qualcomm" for product "Qcs4490 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qcs8550 Firmware Search vendor "Qualcomm" for product "Qcs8550 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qep8111 Firmware Search vendor "Qualcomm" for product "Qep8111 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qfw7114 Firmware Search vendor "Qualcomm" for product "Qfw7114 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Qfw7124 Firmware Search vendor "Qualcomm" for product "Qfw7124 Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Sg8275p Firmware Search vendor "Qualcomm" for product "Sg8275p Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Sm8550p Firmware Search vendor "Qualcomm" for product "Sm8550p Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Snapdragon 4 Gen 2 Mobile Platform Firmware Search vendor "Qualcomm" for product "Snapdragon 4 Gen 2 Mobile Platform Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Snapdragon 8 Gen 1 Mobile Platform Firmware Search vendor "Qualcomm" for product "Snapdragon 8 Gen 1 Mobile Platform Firmware"				*		-		Affected
Qualcomm Search vendor "Qualcomm"		Snapdragon 8 Gen 2 Mobile Platform Firmware Search vendor "Qualcomm" for product "Snapdragon 8 Gen 2 Mobile Platform Firmware"				*		-		Affected