CVE-2017-18160

CVE Database · CVE-2017-18160

CVE-2017-18160

· N/AModified

CVSS v3.1

N/A

EPSS

1.27%

Published

Jan 18, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850

Weaknesses (CWE)

CWE-310

Affected Products (16)

qualcomm · mdm9635m_firmwarevulnerable

qualcomm · mdm9635m

qualcomm · mdm9645_firmwarevulnerable

qualcomm · mdm9645

qualcomm · mdm9650_firmwarevulnerable

qualcomm · mdm9650

qualcomm · mdm9655_firmwarevulnerable

qualcomm · mdm9655

qualcomm · msm8909w_firmwarevulnerable

qualcomm · msm8909w

qualcomm · sd_835_firmwarevulnerable

· sd_835

References (4)

http://www.securityfocus.com/bid/106128

Third Party AdvisoryVDB Entry

https://www.qualcomm.com/company/product-security/bulletins

Vendor Advisory

http://www.securityfocus.com/bid/106128

Third Party AdvisoryVDB Entry

https://www.qualcomm.com/company/product-security/bulletins

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs