CVE-2021-1957

VendorqualcommProductqca6174a firmware, qca6574au firmware, apq8017 firmware, sa6155p firmware, qca6390 firmware, qcs610 firmware, sa8155p firmware, qrb5165 firmware, qcm6125 firmware, sa6145p firmware, sa6150p firmware, sa8150p firmware, sa8195p firmware, qcs6125 firmware, sd855 firmware, qca6391 firmware, qca6421 firmware, qca6426 firmware, qca6431 firmware, qca6436 firmware, qca6696 firmware, qualcomm215 firmware, sa8145p firmware, sd865 5g firmware, sd870 firmwareDiscoveredSep 9, 2021UpdatedNov 21, 2024

Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

View graph Watch Export

CVSS v3.1

6.5 MEDIUM

EPSS

0.15%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorADJACENT

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Timeline

disclosure → media coverage

Sep 9, 2021

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024