CVE-2021-1957

Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
qualcommapq8017_firmware
-
qualcommqca6174a_firmware
-
qualcommqca6390_firmware
-
qualcommqca6391_firmware
-
qualcommqca6421_firmware
-
qualcommqca6426_firmware
-
qualcommqca6431_firmware
-
qualcommqca6436_firmware
-
qualcommqca6574au_firmware
-
qualcommqca6696_firmware
-
qualcommqcm6125_firmware
-
qualcommqcs610_firmware
-
qualcommqcs6125_firmware
-
qualcommqrb5165_firmware
-
qualcommqualcomm215_firmware
-
qualcommsa6145p_firmware
-
qualcommsa6150p_firmware
-
qualcommsa6155p_firmware
-
qualcommsa8145p_firmware
-
qualcommsa8150p_firmware
-
qualcommsa8155p_firmware
-
qualcommsa8195p_firmware
-
qualcommsd855_firmware
-
qualcommsd865_5g_firmware
-
qualcommsd870_firmware
-
qualcommsdx55_firmware
-
qualcommsdx55m_firmware
-
qualcommsdxr2_5g_firmware
-
qualcommwcd9326_firmware
-
qualcommwcd9335_firmware
-
qualcommwcd9341_firmware
-
qualcommwcd9370_firmware
-
qualcommwcd9380_firmware
-
qualcommwcd9385_firmware
-
qualcommwcn3610_firmware
-
qualcommwcn3615_firmware
-
qualcommwcn3660b_firmware
-
qualcommwcn3680_firmware
-
qualcommwcn3950_firmware
-
qualcommwcn3980_firmware
-
qualcommwcn3990_firmware
-
qualcommwcn3998_firmware
-
qualcommwcn6850_firmware
-
qualcommwcn6851_firmware
-
qualcommwsa8810_firmware
-
qualcommwsa8815_firmware
-
𝑥
= Vulnerable software versions
References
https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin
https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin