Search/CVE-2017-18332
● CVE — Medium

CVE-2017-18332

VendorqualcommProductmdm9607 firmware, mdm9650 firmware, sd 210 firmware, sd 212 firmware, sd 425 firmware, sd 430 firmware, sd 625 firmware, sd 650 firmware, sd 652 firmware, sd 820 firmware, sd 835 firmware, sd 845 firmware, sd 205 firmware, sd 450 firmware, msm8996au firmware, msm8909w firmware, mdm9640 firmware, sd 820a firmware, mdm9635m firmware, mdm9645 firmware, mdm9655 firmware, sd 850 firmware, sd 670 firmware, sd 710 firmware, sd 712 firmwareDiscoveredJan 18, 2019UpdatedNov 21, 2024

Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130

View graph Watch Export
CVSS v3.1
5.5 MEDIUM
EPSS
0.23%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 23, 2026
● 0.00pp
0.23% → 0.23% over 9 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Connections
26 relationships
Timeline
disclosure → media coverage
Jan 18, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024