Details of VAR-202301-0628

ID

VAR-202301-0628

CVE

CVE-2022-33218

TITLE

plural Qualcomm Product input verification vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2022-004712

DESCRIPTION

Memory corruption in Automotive due to improper input validation. plural Qualcomm The product contains an input validation vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2022-33218 // JVNDB: JVNDB-2022-004712 // VULMON: CVE-2022-33218

AFFECTED PRODUCTS

vendor:	qualcomm	model:	sa8295p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6696	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8295p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8540p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8096au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa9000p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6584au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8195p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8064au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595	scope:	eq	version:	-	Trust: 1.0
vendor:	クアルコム	model:	qca6574au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8064au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	qca6595	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	apq8096au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	qca6564a	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	msm8996au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	qca6574a	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	qca6564au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	qca6584au	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	qam8295p	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2022-004712 // NVD: CVE-2022-33218

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-33218
value:	HIGH
Trust: 1.0
product-security@qualcomm.com:	CVE-2022-33218
value:	HIGH
Trust: 1.0
NVD:	CVE-2022-33218
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202301-575
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2022-33218
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
product-security@qualcomm.com:	CVE-2022-33218
baseSeverity:	HIGH
baseScore:	8.2
vectorString:	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.5
impactScore:	6.0
version:	3.1
Trust: 1.0
NVD:	CVE-2022-33218
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2022-004712 // CNNVD: CNNVD-202301-575 // NVD: CVE-2022-33218 // NVD: CVE-2022-33218

PROBLEMTYPE DATA

problemtype:	CWE-787	Trust: 1.0
problemtype:	Inappropriate input confirmation (CWE-20) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2022-004712 // NVD: CVE-2022-33218

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202301-575

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202301-575

PATCH

title:	January 2023 Security Bulletin	url:	https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2023-bulletin.html	Trust: 0.8
title:	Qualcomm Chipsets Enter the fix for the verification error vulnerability	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=221579	Trust: 0.6
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2022-33218	Trust: 0.1

sources: VULMON: CVE-2022-33218 // JVNDB: JVNDB-2022-004712 // CNNVD: CNNVD-202301-575

EXTERNAL IDS

db:	NVD	id:	CVE-2022-33218	Trust: 3.3
db:	JVNDB	id:	JVNDB-2022-004712	Trust: 0.8
db:	CNNVD	id:	CNNVD-202301-575	Trust: 0.6
db:	VULMON	id:	CVE-2022-33218	Trust: 0.1

sources: VULMON: CVE-2022-33218 // JVNDB: JVNDB-2022-004712 // CNNVD: CNNVD-202301-575 // NVD: CVE-2022-33218

REFERENCES

url:	https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-33218	Trust: 0.8
url:	https://cxsecurity.com/cveshow/cve-2022-33218/	Trust: 0.6
url:	https://github.com/live-hack-cve/cve-2022-33218	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2022-33218 // JVNDB: JVNDB-2022-004712 // CNNVD: CNNVD-202301-575 // NVD: CVE-2022-33218

SOURCES

db:	VULMON	id:	CVE-2022-33218
db:	JVNDB	id:	JVNDB-2022-004712
db:	CNNVD	id:	CNNVD-202301-575
db:	NVD	id:	CVE-2022-33218

LAST UPDATE DATE

2024-08-14T14:37:06.727000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2022-33218	date:	2023-01-09T00:00:00
db:	JVNDB	id:	JVNDB-2022-004712	date:	2023-04-28T08:18:00
db:	CNNVD	id:	CNNVD-202301-575	date:	2023-01-16T00:00:00
db:	NVD	id:	CVE-2022-33218	date:	2023-08-08T14:21:49.707

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2022-33218	date:	2023-01-09T00:00:00
db:	JVNDB	id:	JVNDB-2022-004712	date:	2023-04-28T00:00:00
db:	CNNVD	id:	CNNVD-202301-575	date:	2023-01-09T00:00:00
db:	NVD	id:	CVE-2022-33218	date:	2023-01-09T08:15:11.807