CVE-2024-45558
What it is
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
At a glance
- Exploitability
- Can be exploited over the network without logging in. High risk of service disruption.
- Exploit odds
- 0.4% chance of exploitation in the next 30 days (EPSS).
- Fix
- A patch, advisory or fixed version is referenced. Upgrade or apply it.
Timeline
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Details
- Published
- Last modified
- Exploit probability
- 0.4% · EPSS, next 30 days
- Weakness
- CWE-126
- Record status
- Analyzed
Affected
- Qualcomm ar8035 Firmware
- Qualcomm csr8811 Firmware
- Qualcomm Fastconnect 6700 Firmware
- Qualcomm Fastconnect 6900 Firmware
- Qualcomm Fastconnect 7800 Firmware
- Qualcomm Immersive Home 214 Firmware
- Qualcomm Immersive Home 216 Firmware
- Qualcomm Immersive Home 316 Firmware
Attack profile CVSS 3.1 · 7.5
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
