CVE-2022-25674

MEDIUM

Qualcomm Snapdragon Consumer IOT, Industrial IOT, Voice & Music - Cryptographic Issues in WPA/WPA2 Group Key Handshake

Title source: llm

Description

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

References (1)

Core 1

Core References

Vendor Advisory

https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletin

Scores

CVSS v3 6.5

EPSS 0.0036

EPSS Percentile 58.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

Status published

Products (16)

qualcomm/ar8031_firmware

qualcomm/csra6620_firmware

qualcomm/csra6640_firmware

qualcomm/mdm9205_firmware

qualcomm/qca4004_firmware

qualcomm/qca4010_firmware

qualcomm/qca4020_firmware

qualcomm/qca4024_firmware

qualcomm/qcs405_firmware

qualcomm/wcd9306_firmware

... and 6 more

Published Nov 15, 2022

Tracked Since Feb 18, 2026