CVE-2022-25674 — MEDIUM (6.5)

Vulnerability Description

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Qualcomm	Ar8031 Firmware	-
Qualcomm	Ar8031	-
Qualcomm	Csra6620 Firmware	-
Qualcomm	Csra6620	-
Qualcomm	Csra6640 Firmware	-
Qualcomm	Csra6640	-
Qualcomm	Mdm9205 Firmware	-
Qualcomm	Mdm9205	-
Qualcomm	Qca4004 Firmware	-
Qualcomm	Qca4004	-
Qualcomm	Qca4010 Firmware	-
Qualcomm	Qca4010	-
Qualcomm	Qca4020 Firmware	-
Qualcomm	Qca4020	-
Qualcomm	Qca4024 Firmware	-
Qualcomm	Qca4024	-
Qualcomm	Qcs405 Firmware	-
Qualcomm	Qcs405	-
Qualcomm	Wcd9306 Firmware	-
Qualcomm	Wcd9306	-

References

https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletVendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/november-2022-bulletVendor Advisory

FAQ

What is CVE-2022-25674?

CVE-2022-25674 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

How severe is CVE-2022-25674?

CVE-2022-25674 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-25674?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Ar8031 Firmware, Qualcomm Ar8031, Qualcomm Csra6620 Firmware, Qualcomm Csra6620, Qualcomm Csra6640 Firmware.