CVE-2022-40525 : Information disclosure in Linux Networking Firmware due to unauthorized informat

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.

Published 2023-06-06 08:15:11

Updated 2024-04-12 17:16:36

Source Qualcomm, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2022-40525

Qualcomm » Qca8081 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8081 » Version: N/A
Qualcomm » Ipq6018 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ipq6018 » Version: N/A
Qualcomm » Csr8811 Firmware » Version: N/A
cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Csr8811 » Version: N/A
Qualcomm » Ipq6000 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ipq6000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ipq6000 » Version: N/A
Qualcomm » Ipq6005 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ipq6005_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ipq6005 » Version: N/A
Qualcomm » Ipq6010 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ipq6010_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ipq6010 » Version: N/A
Qualcomm » Ipq6028 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ipq6028_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ipq6028 » Version: N/A
Qualcomm » Qca4024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca4024 » Version: N/A
Qualcomm » Qca8072 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8072_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8072 » Version: N/A
Qualcomm » Qca8075 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8075_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8075 » Version: N/A
Qualcomm » Qcn5021 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn5021_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn5021 » Version: N/A
Qualcomm » Qcn5022 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn5022_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn5022 » Version: N/A
Qualcomm » Qcn5052 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn5052_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn5052 » Version: N/A
Qualcomm » Qcn5121 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn5121_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn5121 » Version: N/A
Qualcomm » Qcn5122 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn5122_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn5122 » Version: N/A
Qualcomm » Qcn5152 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn5152_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn5152 » Version: N/A
Qualcomm » Qcn6023 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn6023_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn6023 » Version: N/A
Qualcomm » Qcn6024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn6024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn6024 » Version: N/A
Qualcomm » Qcn9000 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9000 » Version: N/A
Qualcomm » Qcn9022 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9022_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9022 » Version: N/A
Qualcomm » Qcn9024 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9024_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9024 » Version: N/A
Qualcomm » Qcn9070 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9070_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9070 » Version: N/A
Qualcomm » Qcn9072 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9072_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9072 » Version: N/A
Qualcomm » Qcn9074 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9074 » Version: N/A
Qualcomm » Ipq9008 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ipq9008_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ipq9008 » Version: N/A
Qualcomm » Qca8082 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8082_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8082 » Version: N/A
Qualcomm » Qca8084 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8084_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8084 » Version: N/A
Qualcomm » Qca8085 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8085_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8085 » Version: N/A
Qualcomm » Qca8386 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qca8386_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qca8386 » Version: N/A
Qualcomm » Qcn9274 Firmware » Version: N/A
cpe:2.3:o:qualcomm:qcn9274_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Qcn9274 » Version: N/A
Qualcomm » Ipq9574 Firmware » Version: N/A
cpe:2.3:o:qualcomm:ipq9574_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Qualcomm » Ipq9574 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-40525

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 14 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-40525

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N	2.5	4.0	Qualcomm, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2022-40525

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: product-security@qualcomm.com (Secondary)
CWE-668 Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-40525

https://www.qualcomm.com/company/product-security/bulletins/june-2023-bulletin

Security Bulletins | Qualcomm Documentation
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-40525

Products affected by CVE-2022-40525

Exploit prediction scoring system (EPSS) score for CVE-2022-40525

CVSS scores for CVE-2022-40525

CWE ids for CVE-2022-40525

References for CVE-2022-40525