Description
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
References (1)
Core 1
Scores
CVSS v3
7.1
EPSS
0.0007
EPSS Percentile
0.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-323
Status
published
Products (50)
qualcomm/fastconnect_6900_firmware
qualcomm/fastconnect_7800_firmware
qualcomm/lemans_au_lgit_firmware
qualcomm/lemansau_firmware
qualcomm/pandeiro_firmware
qualcomm/qam8255p_firmware
qualcomm/qam8397p_firmware
qualcomm/qam8797p_firmware
qualcomm/qamsrv1h_firmware
qualcomm/qamsrv1m_firmware
... and 40 more
Published
Jul 06, 2026
Tracked Since
Jul 07, 2026