ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-35094

—
CVSS 3.1
7.8 high
EPSS
<1%p5
Published
()
Modified
Description

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendors
qualcomm
Products
aqt1000 firmware, qca6390 firmware, qca6391 firmware, qca6420 firmware, qca6421 firmware, qca6426 firmware, qca6430 firmware, qca6431 firmware, qca6436 firmware, qca6574 firmware, qca6574a firmware, qca6574au firmware
Weakness
CWE-287
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.