CVE-2017-18312

While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state transitions in Snapdragon Automobile, Snapdragon Mobile in version MSM8996AU, SD 410/12, SD 617, SD 650/52, SD 810, SD 820, SD 820A
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
qualcommCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
VendorProductVersion
qualcommmsm8996au_firmware
-
qualcommsd_410_firmware
-
qualcommsd_412_firmware
-
qualcommsd_617_firmware
-
qualcommsd_650_firmware
-
qualcommsd_652_firmware
-
qualcommsd_810_firmware
-
qualcommsd_820_firmware
-
qualcommsd_820a_firmware
-
𝑥
= Vulnerable software versions