CVE-2022-25718

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…

Critical · published October 19, 2022

CVSS v3.1
9.1
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

🚨 A sneaky cryptographic issue in Snapdragon components could put your devices at serious risk! 🔥 Think of it like a security guard who forgets to verify the ID of a visitor during a critical check-in process. Anyone could waltz in unchecked, leaving the door wide open for potential trouble! An attacker could exploit this flaw to compromise the authentication handshake, undermining the very foundation of secure communications. This could lead to unauthorized access to sensitive data and control over connected devices, making it a severe threat to user privacy and security.

Put simply

Think of it like a security guard who forgets to verify the ID of a visitor during a critical check-in process. Anyone could waltz in unchecked, leaving the door wide open for potential trouble! The vulnerability arises from an improper check on the return value during the authentication handshake in various Snapdragon products, which could allow malicious actors to bypass security checks.

What to do

An attacker could exploit this flaw to compromise the authentication handshake, undermining the very foundation of secure communications. This could lead to unauthorized access to sensitive data and control over connected devices, making it a severe threat to user privacy and security. Immediately update affected Snapdragon components with the latest security patches provided by the manufacturer. Review configurations to ensure proper authentication checks are in place and monitor device logs for any suspicious activity. 🛡️ You've got this! Follow these steps, and you'll be one step closer to securing your devices! 💪✨

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Published
2022-10-19T00:00Z
EPSS history
Timeline
  • 19 OCT 00:00Z
    Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
    cvelistv5