CVE-2022-25674

VendorqualcommProductqca4020 firmware, qcs405 firmware, mdm9205 firmware, qca4010 firmware, ar8031 firmware, csra6620 firmware, csra6640 firmware, qca4024 firmware, qca4004 firmware, wcn3998 firmware, wsa8810 firmware, wsa8815 firmware, wcd9335 firmware, wcn3980 firmware, wcn3999 firmware, wcd9306 firmwareDiscoveredNov 15, 2022UpdatedNov 21, 2024

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

View graph Watch Export

CVSS v3.1

6.5 MEDIUM

EPSS

0.31%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 22, 2026

▲ 0.02pp

0.29% → 0.31% over 5 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityLOW

IntegrityLOW

AvailabilityNONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Connections

16 relationships