CVE-2024-23358

High

Description

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.

SeverityHigh
CVSS7.5
Exploit probability—
ProductQualcomm Apq8017 Firmware
PublishedSep 2, 2024
First seenSep 2, 2024
Weakness typeCWE-126CWE-126

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm apq8017_firmwareNo range specified—
qualcomm apq8037_firmwareNo range specified—
qualcomm ar8035_firmwareNo range specified—
qualcomm fastconnect_7800_firmwareNo range specified—
qualcomm msm8108_firmwareNo range specified—
qualcomm msm8209_firmwareNo range specified—
qualcomm msm8608_firmwareNo range specified—
qualcomm qca6584au_firmwareNo range specified—
qualcomm qca6698aq_firmwareNo range specified—
qualcomm qca8081_firmwareNo range specified—
qualcomm qca8337_firmwareNo range specified—
qualcomm qcc710_firmwareNo range specified—
qualcomm qcn6224_firmwareNo range specified—
qualcomm qcn6274_firmwareNo range specified—
qualcomm qfw7114_firmwareNo range specified—
qualcomm qfw7124_firmwareNo range specified—
qualcomm 205_mobile_platform_firmwareNo range specified—
qualcomm sdm429w_firmwareNo range specified—
qualcomm sm8635_firmwareNo range specified—
qualcomm smart_audio_200_platform_firmwareNo range specified—
qualcomm snapdragon_208_processor_firmwareNo range specified—
qualcomm snapdragon_210_processor_firmwareNo range specified—
qualcomm snapdragon_212_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_425_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_429_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_430_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_439_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_8_gen_3_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmwareNo range specified—
qualcomm snapdragon_wear_4100\+_platform_firmwareNo range specified—
qualcomm snapdragon_x72_5g_modem-rf_system_firmwareNo range specified—
qualcomm snapdragon_x75_5g_modem-rf_system_firmwareNo range specified—
qualcomm wcd9326_firmwareNo range specified—
qualcomm wcd9340_firmwareNo range specified—
qualcomm wcd9370_firmwareNo range specified—
qualcomm wcd9375_firmwareNo range specified—
qualcomm wcd9390_firmwareNo range specified—
qualcomm wcd9395_firmwareNo range specified—
qualcomm wcn3610_firmwareNo range specified—
qualcomm wcn3615_firmwareNo range specified—
qualcomm wcn3620_firmwareNo range specified—
qualcomm wcn3660b_firmwareNo range specified—
qualcomm wcn3680b_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wcn6755_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—
qualcomm wsa8830_firmwareNo range specified—
qualcomm wsa8832_firmwareNo range specified—
qualcomm wsa8835_firmwareNo range specified—
qualcomm wsa8840_firmwareNo range specified—
qualcomm wsa8845_firmwareNo range specified—
qualcomm wsa8845h_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.