CVE-2018-11284: Critical severity QUALCOMM Mdm9206 Firmware vulnerability

Published Jan 18, 2019

Updated

Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20

Affected Software

24 affected components

QUALCOMM Mdm9206 Firmware

QUALCOMM MDM9206

QUALCOMM Mdm9607 Firmware

QUALCOMM MDM9607

QUALCOMM Mdm9650 Firmware

QUALCOMM MDM9650

QUALCOMM Sd 210 Firmware

QUALCOMM SD 210

QUALCOMM Sd 212 Firmware

QUALCOMM SD 212

QUALCOMM Sd 205 Firmware

QUALCOMM SD 205

QUALCOMM Sd 625 Firmware

QUALCOMM SD 625

QUALCOMM Sd 636 Firmware

QUALCOMM SD 636

QUALCOMM Sda660 Firmware

QUALCOMM SDA660

QUALCOMM Sdm630 Firmware

QUALCOMM SDM630

QUALCOMM Sdm660 Firmware

QUALCOMM SDM660

Qualcomm Sdx20 Firmware

QUALCOMM SDX20

Event History

Jan 18, 2019

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-11284?

CVE-2018-11284 has been classified as a high-severity vulnerability due to its potential to disrupt device registration processes.

How do I fix CVE-2018-11284?

To mitigate CVE-2018-11284, update the affected Qualcomm firmware to the latest available version which addresses this vulnerability.

What devices are affected by CVE-2018-11284?

CVE-2018-11284 impacts Qualcomm Snapdragon mobile and wearable devices, including models like MDM9206, MDM9607, and SD 210.

What kind of attacks does CVE-2018-11284 enable?

CVE-2018-11284 allows attackers to send spoofed SMS messages that can flood the device with registration updates.

Is it safe to use devices with CVE-2018-11284 until patched?

Using affected devices without a patch for CVE-2018-11284 poses significant security risks and is not recommended.