Skip to content
OpenAdvisories
Critical · 9.1 CVE-2023-43551 EUVD-2023-47957GHSA-4h56-hghf-36cj

Improper Authentication in Multi-Mode Call Processor

Published Jun 3, 2024 · Updated Aug 2, 2024 · Assigned by qualcomm

Description

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon 315 5G IoT Modem, 9205 LTE Modem, 9206 LTE Modem, 9207 LTE Modem, APQ8017, APQ8037, AQT1000, AR6003, AR8035, C-V2X 9150, CSRA6620, CSRA6640, CSRB31024, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, MDM8207, MDM9205S, MDM9230, MDM9250, MDM9330, MDM9615, MD… —

Advisories 2

References