What is the CVSS score of CVE-2025-47378?

CVE-2025-47378 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Fastconnect 6900 Firmware are affected by CVE-2025-47378?

A cryptographic vulnerability in shared VM references enables unauthorized access to boot loaders and certificate chains, potentially allowing attackers to compromise system integrity and bypass…

How to fix or mitigate CVE-2025-47378?

Within 24 hours: Identify and inventory all systems running affected virtualization platforms; disable shared VM references if operationally feasible; implement enhanced monitoring for suspicious boot loader access attempts. Within 7 days: Conduct risk assessment to prioritize critical systems; implement network segmentation to isolate high-value VMs; establish incident response procedures for potential compromise. Within 30 days: Maintain continuous monitoring; prepare remediation runbooks; coordinate with vendor for patch timeline and test in non-production environments upon release.

Fastconnect 6900 Firmware CVE-2025-47378

HIGH

Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497)

2026-03-02 product-security@qualcomm.com

Information Disclosure Fastconnect 6900 Firmware Snapdragon Xr2 5g Platform Firmware Sar2230p Firmware Snapdragon Ar1 Gen 1 Platform Firmware Xg101002 Firmware Qln1086bd Firmware Qamsrv1h Firmware X2000092 Firmware Sar1250p Firmware Sa8770p Firmware Qxm1096 Firmware Qpa1083bd Firmware Qca6696 Firmware Sar2130p Firmware Qca6797aq Firmware X2000090 Firmware Wcd9378c Firmware Qxm1094 Firmware Qam8255p Firmware Cologne Firmware Wsa8815 Firmware Snapdragon X55 5g Modem Rf System Firmware Sd865 5g Firmware Snapdragon 870 5g Mobile Platform Firmware Qca6391 Firmware Srv1m Firmware Wcd9380 Firmware Sxr2230p Firmware Pandeiro Firmware X2000094 Firmware Sa7775p Firmware Qpa1086bd Firmware X2000086 Firmware Fastconnect 6800 Firmware Wcd9395 Firmware Sa8620p Firmware Snapdragon 8 Elite Gen 5 Firmware X2000077 Firmware Wsa8845h Firmware Qxm1086 Firmware Sa9000p Firmware Snapdragon 865 5g Mobile Platform Firmware Lemansau Firmware Lemans Au Lgit Firmware Xg101032 Firmware Qxm1095 Firmware Qca6595au Firmware Wsa8845 Firmware Wcn3950 Firmware Wcd9385 Firmware Wcn7860 Firmware Wsa8830 Firmware Sa7255p Firmware Qxm1093 Firmware Sar1165p Firmware Qln1083bd Firmware Xg101039 Firmware Wsa8810 Firmware Qamsrv1m Firmware Qca6698aq Firmware Srv1h Firmware Wsa8835 Firmware Qxm1083 Firmware Qca6595 Firmware Wcn7861 Firmware Wsa8832 Firmware Sa8255p Firmware Fastconnect 7800 Firmware Wsa8840 Firmware Sxr2250p Firmware Fastconnect 6700 Firmware

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 02, 2026 - 17:16 nvd

HIGH 7.1

DescriptionCVE.org

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

AnalysisAI

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain. [CVSS 7.1 HIGH]

Technical ContextAI

Affects Cologne Firmware. Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

RemediationAI

Monitor vendor advisories for a patch.

More in Fastconnect 6900 Firmware

View all

CVE-2025-21480 HIGH Act Now

8.6 Jun 03

Qualcomm GPU micronode contains a memory corruption vulnerability (CVE-2025-21480, CVSS 8.6) caused by unauthorized comm

CVE-2025-21479 HIGH Act Now

8.6 Jun 03

A second Qualcomm GPU micronode memory corruption vulnerability (CVE-2025-21479, CVSS 8.6) exists in the unauthorized co

CVE-2026-21385 HIGH Act Now POC

7.8 Mar 02

A Qualcomm chipset vulnerability (CVE-2026-21385) causes memory corruption through improper integer handling during memo

CVE-2023-33025 CRITICAL Act Now

9.8 Jan 02

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. Rated critical severity (CVSS 9.8), t

CVE-2024-21480 CRITICAL Act Now

9.8 May 06

Memory corruption while playing audio file having large-sized input buffer. Rated critical severity (CVSS 9.8), this vul

CVE-2024-21473 CRITICAL Act Now

9.8 Apr 01

Memory corruption while redirecting log file to any file location with any file name. Rated critical severity (CVSS 9.8)

CVE-2024-21463 CRITICAL Act Now

9.8 Apr 01

Memory corruption while processing Codec2 during v13k decoder pitch synthesis. Rated critical severity (CVSS 9.8), this

CVE-2023-22388 CRITICAL Act Now

9.8 Nov 07

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this v

CVE-2023-24855 CRITICAL Act Now

9.8 Oct 03

Memory corruption in Modem while processing security related configuration before AS Security Exchange. Rated critical s

CVE-2023-22385 CRITICAL Act Now

9.8 Oct 03

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulner

CVE-2023-28581 CRITICAL Act Now

9.8 Sep 05

Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE. Rated critical severity (CVSS 9.8), this

CVE-2023-21631 CRITICAL Act Now

9.8 Jul 04

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

Same weakness CWE-497 – Exposure of Sensitive System Information to an Unauthorized Control Sphere

View all

CVE-2026-34413 HIGH POC

8.8

CVE-2026-41459 MEDIUM POC

6.9

CVE-2022-1902 HIGH POC

8.8

CVE-2022-4985 HIGH POC

8.7

CVE-2018-25358 HIGH POC

8.7

CVE-2020-36922 HIGH POC

7.5

CVE-2020-36926 HIGH POC

7.5

CVE-2024-25634 MEDIUM POC

6.5

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2025-47378 vulnerability details – vuln.today

Back

Fastconnect 6900 Firmware CVE-2025-47378

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Fastconnect 6900 Firmware

Same weakness CWE-497 – Exposure of Sensitive System Information to an Unauthorized Control Sphere

Same technique Information Disclosure

Share

External POC / Exploit Code