1. Home
  2. CVE Database
  3. CVE-2021-30346
MEDIUM · 6.5

CVE-2021-30346

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networkin...

Vulnerability Description

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
QualcommAr8035 Firmware-
QualcommAr8035-
QualcommQca9984 Firmware-
QualcommQca9984-
QualcommQcm2290 Firmware-
QualcommQcm2290-
QualcommQcm4290 Firmware-
QualcommQcm4290-
QualcommQcs2290 Firmware-
QualcommQcs2290-
QualcommQcs405 Firmware-
QualcommQcs405-
QualcommQcs4290 Firmware-
QualcommQcs4290-
QualcommSd460 Firmware-
QualcommSd460-
QualcommSd480 Firmware-
QualcommSd480-
QualcommSd662 Firmware-
QualcommSd662-

References

FAQ

What is CVE-2021-30346?

CVE-2021-30346 is a vulnerability with a CVSS score of 6.5 (MEDIUM). RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networkin...

How severe is CVE-2021-30346?

CVE-2021-30346 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-30346?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Ar8035 Firmware, Qualcomm Ar8035, Qualcomm Qca9984 Firmware, Qualcomm Qca9984, Qualcomm Qcm2290 Firmware.