CVE-2023-33027: Buffer Over-read in WLAN Firmware

Record summary

CVE-2023-33027 has a selected CVSS score of 7.5 (high).

Description

Transient DOS in WLAN Firmware while parsing rsn ies.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableYes

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 12, 2024 · Source: CVE List

Affected products and versions

Showing 12 of 100Source data: 100 of 289 entries available

Product	Source	Version range	Status
Snapdragon Browse Qualcomm, Inc. / Snapdragon Default status: unaffected	CVE List	315 5G IoT Modem	affected
		AQT1000	affected
		AR8031	affected
		AR8035	affected
		AR9380	affected
		CSR8811	affected
		CSRA6620	affected
		CSRA6640	affected
		CSRB31024	affected
		FastConnect 6200	affected
		FastConnect 6700	affected
		FastConnect 6800	affected
		Showing 12 of 318 version ranges
315_5g_iot_modem_firmware Browse qualcomm / 315_5g_iot_modem_firmware Default status: unknown	CVE List	Through *	affected
aqt1000_firmware Browse qualcomm / aqt1000_firmware Default status: unknown	CVE List	Through *	affected
ar8031_firmware Browse qualcomm / ar8031_firmware Default status: unknown	CVE List	Through *	affected
ar8035_firmware Browse qualcomm / ar8035_firmware Default status: unknown	CVE List	Through *	affected
ar9380_firmware Browse qualcomm / ar9380_firmware Default status: unknown	CVE List	Through *	affected
csr8811_firmware Browse qualcomm / csr8811_firmware Default status: unknown	CVE List	Through *	affected
csra6620_firmware Browse qualcomm / csra6620_firmware Default status: unknown	CVE List	Through *	affected
csra6640_firmware Browse qualcomm / csra6640_firmware Default status: unknown	CVE List	Through *	affected
csrb31024_firmware Browse qualcomm / csrb31024_firmware Default status: unknown	CVE List	Through *	affected
fastconnect_6200_firmware Browse qualcomm / fastconnect_6200_firmware Default status: unknown	CVE List	Through *	affected
fastconnect_6700_firmware Browse qualcomm / fastconnect_6700_firmware Default status: unknown	CVE List	Through *	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2023-33027

qualcomm.com

https://www.qualcomm.com/company/product-security/bulletins/october-2023-bulletin

CVE-2023-33027

Record summary

Description

Exploitation context

CISA SSVC decision

Affected products and versions

Snapdragon

315_5g_iot_modem_firmware

aqt1000_firmware

ar8031_firmware

ar8035_firmware

ar9380_firmware

csr8811_firmware

csra6620_firmware

csra6640_firmware

csrb31024_firmware

fastconnect_6200_firmware

fastconnect_6700_firmware

References