CVE-2017-18321: Infoleak
Published Dec 3, 2018
·Updated
Security keys used by the terminal and NW for a session could be leaked in snapdragon mobile in versions MDM9650, MDM9655, SD 835, SDA660.
Affected Software
9 affected components
Google Android
QUALCOMM Mdm9650 Firmware
QUALCOMM MDM9650
QUALCOMM Mdm9655 Firmware
QUALCOMM MDM9655
QUALCOMM Sd 835 Firmware
QUALCOMM SD 835
QUALCOMM Sda660 Firmware
QUALCOMM SDA660
Event History
Dec 3, 2018
CVE Published
via Android·12:00 AM
Jan 3, 2019
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-18321?
CVE-2017-18321 has a moderate severity rating due to potential information leakage of security keys.
2
How do I fix CVE-2017-18321?
To mitigate CVE-2017-18321, update the affected Qualcomm firmware to the latest version that addresses this vulnerability.
3
Which devices are affected by CVE-2017-18321?
CVE-2017-18321 affects devices running Qualcomm Mdm9650, Mdm9655, SD 835, and SDA660 firmware.
4
What type of vulnerability is CVE-2017-18321?
CVE-2017-18321 is categorized as an information disclosure vulnerability.
5
Can CVE-2017-18321 lead to further exploitation?
Yes, if exploited, CVE-2017-18321 could potentially allow attackers to leverage leaked security keys for further attacks.