9206 Lte Firmware
CVE-2023-33019
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
1DescriptionNVD
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
AnalysisAI
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-285. Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE. Affected products include: Qualcomm 9206 Lte Firmware, Qualcomm Apq8017 Firmware, Qualcomm Apq8052 Firmware, Qualcomm Apq8056 Firmware, Qualcomm Apq8076 Firmware.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in 9206 Lte Firmware
View allTransient DOS while processing TIM IE from beacon frame as there is no check for IE length. Rated high severity (CVSS 7.
Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE. Rated h
Same weakness CWE-285 – Improper Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today