Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-2317

The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, SC8180X, SDM429, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150

Published

2020-03-05T09:15:18.327

Last Modified

2024-11-21T04:40:41.617

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-330
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qualcomm msm8905_firmware - Yes
Hardware qualcomm msm8905 - No
Operating System qualcomm msm8909_firmware - Yes
Hardware qualcomm msm8909 - No
Operating System qualcomm msm8917_firmware - Yes
Hardware qualcomm msm8917 - No
Operating System qualcomm msm8920_firmware - Yes
Hardware qualcomm msm8920 - No
Operating System qualcomm msm8937_firmware - Yes
Hardware qualcomm msm8937 - No
Operating System qualcomm msm8940_firmware - Yes
Hardware qualcomm msm8940 - No
Operating System qualcomm msm8953_firmware - Yes
Hardware qualcomm msm8953 - No
Operating System qualcomm nicobar_firmware - Yes
Hardware qualcomm nicobar - No
Operating System qualcomm qcm2150_firmware - Yes
Hardware qualcomm qcm2150 - No
Operating System qualcomm qm215_firmware - Yes
Hardware qualcomm qm215 - No
Operating System qualcomm sc8180x_firmware - Yes
Hardware qualcomm sc8180x - No
Operating System qualcomm sdm429_firmware - Yes
Hardware qualcomm sdm429 - No
Operating System qualcomm sdm439_firmware - Yes
Hardware qualcomm sdm439 - No
Operating System qualcomm sdm450_firmware - Yes
Hardware qualcomm sdm450 - No
Operating System qualcomm sdm632_firmware - Yes
Hardware qualcomm sdm632 - No
Operating System qualcomm sdx24_firmware - Yes
Hardware qualcomm sdx24 - No
Operating System qualcomm sdx55_firmware - Yes
Hardware qualcomm sdx55 - No
Operating System qualcomm sm6150_firmware - Yes
Hardware qualcomm sm6150 - No
Operating System qualcomm sm7150_firmware - Yes
Hardware qualcomm sm7150 - No
Operating System qualcomm sm8150_firmware - Yes
Hardware qualcomm sm8150 - No
References