CVE-2025-21448
HIGHCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
2Tags
Description
Transient DOS may occur while parsing SSID in action frames.
Analysis
Transient DOS may occur while parsing SSID in action frames. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical Context
This vulnerability is classified under CWE-126. Affected products include: Qualcomm Qcn9070 Firmware, Qualcomm Qcn9072 Firmware, Qualcomm Qcn9074 Firmware, Qualcomm Qcn9100 Firmware, Qualcomm Qcn9274 Firmware.
Affected Products
Qualcomm Qcn9070 Firmware, Qualcomm Qcn9072 Firmware, Qualcomm Qcn9074 Firmware, Qualcomm Qcn9100 Firmware, Qualcomm Qcn9274 Firmware.
Remediation
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today