CVE-2018-13908 in Snapdragon Auto

Riassunto

di VulDB • 23/06/2026

Un token di autenticazione dell'accesso troncato porta a un controllo degli accessi indebolito per i dati sicuri delle applicazioni memorizzate in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking nei dispositivi IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 11/07/2018
• Moderazione: accettato
• Voce: VDB-136493
• CPE: pronto
• CWE: CWE-285 (confermato)
• CVSS: 7.8 (NVD)
• EPSS: 0.00192
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Industry, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-13908
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-13908
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-13908/