1. Home
  2. CVE Database
  3. CVE-2021-1957
MEDIUM · 6.5

CVE-2021-1957

Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap...

Vulnerability Description

Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
QualcommApq8017 Firmware-
QualcommApq8017-
QualcommQca6174A Firmware-
QualcommQca6174A-
QualcommQca6390 Firmware-
QualcommQca6390-
QualcommQca6391 Firmware-
QualcommQca6391-
QualcommQca6421 Firmware-
QualcommQca6421-
QualcommQca6426 Firmware-
QualcommQca6426-
QualcommQca6431 Firmware-
QualcommQca6431-
QualcommQca6436 Firmware-
QualcommQca6436-
QualcommQca6574Au Firmware-
QualcommQca6574Au-
QualcommQca6696 Firmware-
QualcommQca6696-

References

FAQ

What is CVE-2021-1957?

CVE-2021-1957 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap...

How severe is CVE-2021-1957?

CVE-2021-1957 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1957?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Apq8017 Firmware, Qualcomm Apq8017, Qualcomm Qca6174A Firmware, Qualcomm Qca6174A, Qualcomm Qca6390 Firmware.