CVE-2024-21454 - OpenCVE

Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Qualcomm	C-v2x 9150 Snapdragon Auto 4g Modem Snapdragon Auto 5g Modem-rf

No data.

No data.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2024-04-01T15:06:03.008Z

Updated: 2024-08-01T22:20:40.818Z

Reserved: 2023-12-12T06:07:46.902Z

Link: CVE-2024-21454

Vulnrichment

Updated: 2024-06-11T15:53:46.786Z

NVD

Status : Awaiting Analysis

Published: 2024-04-01T15:15:48.667

Modified: 2024-04-12T09:15:10.083

Link: CVE-2024-21454

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-21454", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2023-12-12T06:07:46.902Z", "datePublished": "2024-04-01T15:06:03.008Z", "dateUpdated": "2024-08-01T22:20:40.818Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Auto"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "C-V2X 9150"}, {"status": "affected", "version": "Snapdragon Auto 5G Modem-RF"}, {"status": "affected", "version": "Snapdragon Auto 4G Modem"}]}], "descriptions": [{"lang": "en", "value": "Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-680", "description": "CWE-680 Integer Overflow to Buffer Overflow", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-04-12T08:39:03.871Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html"}], "title": "Integer Overflow to Buffer Overflow in Automotive Telematics"}, "adp": [{"affected": [{"vendor": "qualcomm", "product": "c-v2x_9150", "cpes": ["cpe:2.3:a:qualcomm:c-v2x_9150:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "*", "versionType": "custom"}]}, {"vendor": "qualcomm", "product": "snapdragon_auto_5g_modem-rf", "cpes": ["cpe:2.3:a:qualcomm:snapdragon_auto_5g_modem-rf:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "*", "versionType": "custom"}]}, {"vendor": "qualcomm", "product": "snapdragon_auto_4g_modem", "cpes": ["cpe:2.3:a:qualcomm:snapdragon_auto_4g_modem:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "*", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-04-01T19:12:24.938262Z", "id": "CVE-2024-21454", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-24T15:37:08.089Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:20:40.818Z"}, "title": "CVE Program Container", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-21454", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-01T19:12:24.938262Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:qualcomm:c-v2x_9150:*:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "c-v2x_9150", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:qualcomm:snapdragon_auto_5g_modem-rf:*:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "snapdragon_auto_5g_modem-rf", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:qualcomm:snapdragon_auto_4g_modem:*:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "snapdragon_auto_4g_modem", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T15:53:46.786Z"}}], "cna": {"title": "Integer Overflow to Buffer Overflow in Automotive Telematics", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "C-V2X 9150"}, {"status": "affected", "version": "Snapdragon Auto 5G Modem-RF"}, {"status": "affected", "version": "Snapdragon Auto 4G Modem"}], "platforms": ["Snapdragon Auto"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html"}], "descriptions": [{"lang": "en", "value": "Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-680", "description": "CWE-680 Integer Overflow to Buffer Overflow"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-04-12T08:39:03.871Z"}}}, "cveMetadata": {"cveId": "CVE-2024-21454", "state": "PUBLISHED", "dateUpdated": "2024-07-24T15:37:08.089Z", "dateReserved": "2023-12-12T06:07:46.902Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2024-04-01T15:06:03.008Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.1"}