{"id": "CVE-2021-35070", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "product-security@qualcomm.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 2.0}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2022-06-14T10:15:15.600", "references": [{"url": "https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin", "tags": ["Vendor Advisory"], "source": "product-security@qualcomm.com"}, {"url": "https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile"}, {"lang": "es", "value": "RPM secure Stream puede acceder a cualquier recurso seguro debido a una configuraci\u00f3n inapropiada de la SMMU y puede conllevar a una divulgaci\u00f3n de informaci\u00f3n en Snapdragon Industrial IOT, Snapdragon Mobile"}], "lastModified": "2024-11-21T06:11:47.790", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB226552-52D9-44F5-A170-35C44761A72B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcm6125:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FBB16DC4-CDC9-4936-9C6A-0ED8E1F6D056"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4468EA5D-87B0-4FEC-A3DB-617651B0D169"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:qcs6125:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6DA2C3E1-E285-4CAD-9FA3-813C8EC436F6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:sd665_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0A472AF-D0EE-4D75-9EFD-9F77FE30C8B2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:sd665:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E6AE7466-2094-4E1E-BF4C-D3C6A5F6223A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1295D869-F4DD-4766-B4AA-3513752F43B4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B98784DC-3143-4D38-AD28-DBBDCCAB4272"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34143ABA-7D09-429F-A65C-3A33438BF62C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FEF2DB6-00F5-4B07-953B-EF58B31267F1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "120E8F0F-EBEB-4565-9927-2D473F783EF7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C6E9038-9B18-4958-BE1E-215901C9B4B2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B36D3274-F8D0-49C5-A6D5-95F5DC6D1950"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15307882-7039-43E9-9BA3-035045988B99"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AA85B322-E593-4499-829A-CC6D70BAE884"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E839A0B9-64C3-4C7A-82B7-D2AAF65928F8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7E870D82-DE3B-4199-A730-C8FB545BAA98"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "product-security@qualcomm.com"}
