CVE-2024-23358
published 2024-09-02CVE-2024-23358: Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
PriorityP335high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.26%
17.7th percentile
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
Affected
54 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
| qualcomm_inc | snapdragon | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_oracle7.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Oracle
Oracle Oracle Commerce Risk Matrix: Business Control Center (underscore) — CVE-2021-23358
vendor_oracle·2024-10-15·CVSS 7.2
CVE-2021-23358 [LOW] Oracle Oracle Commerce Risk Matrix: Business Control Center (underscore) — CVE-2021-23358
Oracle Oracle Commerce Risk Matrix: Business Control Center (underscore) vulnerability
CVE: CVE-2021-23358
CVSS: 7.2
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpuoct2024 (OCT 2024)
Android
CVE-2024-23358: Closed-source component
vendor_android·2024-09-01·CVSS 7.5
CVE-2024-23358 [HIGH] CVE-2024-23358: Closed-source component
Android Security Bulletin 2024-09-01
CVE: CVE-2024-23358
Severity: HIGH
Component: Closed-source component
References: A-328083897 *
GHSA
GHSA-2xv6-3vp8-pp7j: Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem
ghsa_unreviewed·2024-09-02
CVE-2024-23358 [HIGH] CWE-126 GHSA-2xv6-3vp8-pp7j: Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-02
Published