CVE-2022-25674 : Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdra

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Published 2022-11-15 10:15:14

Updated 2022-11-18 04:52:15

Source Qualcomm, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2022-25674

EPSS FAQ

0.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 54 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-25674

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	3.9	2.5	Qualcomm, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

Products affected by CVE-2022-25674

Qualcomm » Qca4020 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca4020_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca4020 » Version: N/A
Qualcomm » Qcs405 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcs405 » Version: N/A
Qualcomm » Mdm9205 Firmware » Version: N/A
cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Mdm9205 » Version: N/A
Qualcomm » Qca4010 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca4010_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca4010 » Version: N/A
Qualcomm » Wcd9335 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9335 » Version: N/A
Qualcomm » Wcn3998 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3998 » Version: N/A
Qualcomm » Wsa8810 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8810 » Version: N/A
Qualcomm » Wsa8815 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wsa8815 » Version: N/A
Qualcomm » Ar8031 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ar8031 » Version: N/A
Qualcomm » Csra6620 Firmware » Version: N/A
cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Csra6620 » Version: N/A
Qualcomm » Csra6640 Firmware » Version: N/A
cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Csra6640 » Version: N/A
Qualcomm » Qca4024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca4024 » Version: N/A
Qualcomm » Wcn3980 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3980 » Version: N/A
Qualcomm » Wcn3999 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcn3999_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcn3999 » Version: N/A
Qualcomm » Qca4004 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca4004_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca4004 » Version: N/A
Qualcomm » Wcd9306 Firmware » Version: N/A
cpe:2.3:o:qualcomm:wcd9306_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Wcd9306 » Version: N/A

Vulnerability Details : CVE-2022-25674

Exploit prediction scoring system (EPSS) score for CVE-2022-25674

CVSS scores for CVE-2022-25674

References for CVE-2022-25674

Products affected by CVE-2022-25674