CVE-2023-43551: Improper Authentication in Multi-Mode Call Processor
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43551?
CVE-2023-43551 has been classified as high severity due to the potential for exploitation by rogue base stations to bypass authentication.
How do I fix CVE-2023-43551?
To fix CVE-2023-43551, update affected Qualcomm modem firmware to the latest version provided by the vendor.
Which devices are affected by CVE-2023-43551?
CVE-2023-43551 affects specific Qualcomm 5G and LTE modem firmware, including various models in the Snapdragon series.
What impact can CVE-2023-43551 have on users?
Exploitation of CVE-2023-43551 can lead to unauthorized access to network services and potential data interception.
Is there a workaround for CVE-2023-43551?
Currently, the recommended solution is to apply firmware updates; no official workaround has been provided.