CVE-2023-43551

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. It has a CVSS v3.1 base score of 9.1 (CRITICAL).

CVE-2023-43551 has a CVSS v3.1 score of 9.1 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.

CVE-2023-43551 affects products from qualcomm, specifically: 205_mobile, 205_mobile_firmware, 215_mobile, 215_mobile_firmware, 315_5g_iot_modem, 315_5g_iot_modem_firmware, 9205_lte_modem, 9205_lte_modem_firmware, 9206_lte_modem, 9206_lte_modem_firmware, 9207_lte_modem, 9207_lte_modem_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, aqt1000, aqt1000_firmware, ar6003, ar6003_firmware, ar8035, ar8035_firmware, c-v2x_9150, c-v2x_9150_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, mdm8207, mdm8207_firmware, mdm9205s, mdm9205s_firmware, mdm9230, mdm9230_firmware, mdm9250, mdm9250_firmware, mdm9330, mdm9330_firmware, mdm9615, mdm9615_firmware, mdm9628, mdm9628_firmware, mdm9630, mdm9630_firmware, mdm9640, mdm9640_firmware, msm8108, msm8108_firmware, msm8209, msm8209_firmware, msm8608, msm8608_firmware, msm8909w, msm8909w_firmware, msm8996au, msm8996au_firmware, qca4004, qca4004_firmware, qca6174, qca6174_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6335, qca6335_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6431, qca6431_firmware, qca6436, qca6436_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574, qca6574_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6584, qca6584_firmware, qca6584au, qca6584au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca6698aq, qca6698aq_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qca9367, qca9367_firmware, qca9377, qca9377_firmware, qcc710, qcc710_firmware, qcm2290, qcm2290_firmware, qcm4290, qcm4290_firmware, qcm4325, qcm4325_firmware, qcm4490, qcm4490_firmware, qcm5430, qcm5430_firmware, qcm6125, qcm6125_firmware, qcm6490, qcm6490_firmware, qcm8550, qcm8550_firmware, qcn6024, qcn6024_firmware, qcn6224, qcn6224_firmware, qcn6274, qcn6274_firmware, qcn9024, qcn9024_firmware, qcs2290, qcs2290_firmware, qcs410, qcs410_firmware, qcs4290, qcs4290_firmware, qcs4490, qcs4490_firmware, qcs5430, qcs5430_firmware, qcs610, qcs610_firmware, qcs6125, qcs6125_firmware, qcs6490, qcs6490_firmware, qcs8550, qcs8550_firmware, qfw7114, qfw7114_firmware, qfw7124, qfw7124_firmware, qts110, qts110_firmware, robotics_rb3, robotics_rb3_firmware, sc8180x-aaab, sc8180x-aaab_firmware, sc8180x-acaf, sc8180x-acaf_firmware, sc8180x-ad, sc8180x-ad_firmware, sc8180x\+sdx55, sc8180x\+sdx55_firmware, sc8180xp-aaab, sc8180xp-aaab_firmware, sc8180xp-acaf, sc8180xp-acaf_firmware, sc8180xp-ad, sc8180xp-ad_firmware, sd626, sd626_firmware, sd660, sd660_firmware, sd670, sd670_firmware, sd675, sd675_firmware, sd730, sd730_firmware, sd820, sd820_firmware, sd835, sd835_firmware, sd855, sd855_firmware, sd865_5g, sd865_5g_firmware, sd888, sd888_firmware, sd_455, sd_455_firmware, sd_675, sd_675_firmware, sdm429w, sdm429w_firmware, sdx55, sdx55_firmware, sdx57m, sdx57m_firmware, sg4150p, sg4150p_firmware, sg8275p, sg8275p_firmware, sm6250, sm6250_firmware, sm6250p, sm6250p_firmware, sm7250p, sm7250p_firmware, sm7315, sm7315_firmware, sm7325p, sm7325p_firmware, sm8550p, sm8550p_firmware, smart_audio_200, smart_audio_200_firmware, smart_audio_400, smart_audio_400_firmware, smart_display_200, smart_display_200_firmware, snapdragon_1100_wearable, snapdragon_1100_wearable_firmware, snapdragon_1200_wearable, snapdragon_1200_wearable_firmware, snapdragon_208, snapdragon_208_firmware, snapdragon_210, snapdragon_210_firmware, snapdragon_212_mobile, snapdragon_212_mobile_firmware, snapdragon_425_mobile, snapdragon_425_mobile_firmware, snapdragon_429_mobile, snapdragon_429_mobile_firmware, snapdragon_430_mobile, snapdragon_430_mobile_firmware, snapdragon_439_mobile, snapdragon_439_mobile_firmware, snapdragon_460_mobile, snapdragon_460_mobile_firmware, snapdragon_480\+_5g_mobile, snapdragon_480\+_5g_mobile_firmware, snapdragon_480_5g_mobile, snapdragon_480_5g_mobile_firmware, snapdragon_4_gen_1_mobile, snapdragon_4_gen_1_mobile_firmware, snapdragon_630_mobile, snapdragon_630_mobile_firmware, snapdragon_636_mobile, snapdragon_636_mobile_firmware, snapdragon_660_mobile, snapdragon_660_mobile_firmware, snapdragon_662_mobile, snapdragon_662_mobile_firmware, snapdragon_665_mobile, snapdragon_665_mobile_firmware, snapdragon_670_mobile, snapdragon_670_mobile_firmware, snapdragon_675_mobile, snapdragon_675_mobile_firmware, snapdragon_678_mobile, snapdragon_678_mobile_firmware, snapdragon_680_4g_mobile, snapdragon_680_4g_mobile_firmware, snapdragon_685_4g_mobile, snapdragon_685_4g_mobile_firmware, snapdragon_690_5g_mobile, snapdragon_690_5g_mobile_firmware, snapdragon_695_5g_mobile, snapdragon_695_5g_mobile_firmware, snapdragon_710_mobile, snapdragon_710_mobile_firmware, snapdragon_712_mobile, snapdragon_712_mobile_firmware, snapdragon_720g_mobile, snapdragon_720g_mobile_firmware, snapdragon_730_mobile, snapdragon_730_mobile_firmware, snapdragon_730g_mobile, snapdragon_730g_mobile_firmware, snapdragon_732g_mobile, snapdragon_732g_mobile_firmware, snapdragon_750g_5g_mobile, snapdragon_750g_5g_mobile_firmware, snapdragon_765_5g_mobile, snapdragon_765_5g_mobile_firmware, snapdragon_765g_5g_mobile, snapdragon_765g_5g_mobile_firmware, snapdragon_768g_5g_mobile, snapdragon_768g_5g_mobile_firmware, snapdragon_778g\+_5g_mobile, snapdragon_778g\+_5g_mobile_firmware, snapdragon_778g_5g_mobile, snapdragon_778g_5g_mobile_firmware, snapdragon_780g_5g_mobile, snapdragon_780g_5g_mobile_firmware, snapdragon_782g_mobile, snapdragon_782g_mobile_firmware, snapdragon_7c\+_gen_3_compute, snapdragon_7c\+_gen_3_compute_firmware, snapdragon_7c_compute, snapdragon_7c_compute_firmware, snapdragon_7c_gen_2_compute, snapdragon_7c_gen_2_compute_firmware, snapdragon_820_automotive, snapdragon_820_automotive_firmware, snapdragon_835_mobile, snapdragon_835_mobile_firmware, snapdragon_845_mobile, snapdragon_845_mobile_firmware, snapdragon_850_mobile_compute, snapdragon_850_mobile_compute_firmware, snapdragon_855\+_mobile, snapdragon_855\+_mobile_firmware, snapdragon_855_mobile, snapdragon_855_mobile_firmware, snapdragon_860_mobile, snapdragon_860_mobile_firmware, snapdragon_865\+_5g_mobile, snapdragon_865\+_5g_mobile_firmware, snapdragon_865_5g_mobile, snapdragon_865_5g_mobile_firmware, snapdragon_870_5g_mobile, snapdragon_870_5g_mobile_firmware, snapdragon_888\+_5g_mobile, snapdragon_888\+_5g_mobile_firmware, snapdragon_888_5g_mobile, snapdragon_888_5g_mobile_firmware, snapdragon_8\+_gen_1_mobile, snapdragon_8\+_gen_1_mobile_firmware, snapdragon_8\+_gen_2_mobile, snapdragon_8\+_gen_2_mobile_firmware, snapdragon_8_gen_1_mobile, snapdragon_8_gen_1_mobile_firmware, snapdragon_8_gen_2_mobile, snapdragon_8_gen_2_mobile_firmware, snapdragon_auto_4g_modem, snapdragon_auto_4g_modem_firmware, snapdragon_auto_5g_modem-rf, snapdragon_auto_5g_modem-rf_firmware, snapdragon_auto_5g_modem-rf_gen_2, snapdragon_auto_5g_modem-rf_gen_2_firmware, snapdragon_w5\+_gen_1_wearable, snapdragon_w5\+_gen_1_wearable_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_wear_2100, snapdragon_wear_2100_firmware, snapdragon_wear_2500, snapdragon_wear_2500_firmware, snapdragon_wear_3100, snapdragon_wear_3100_firmware, snapdragon_wear_4100\+, snapdragon_wear_4100\+_firmware, snapdragon_x12_lte_modem, snapdragon_x12_lte_modem_firmware, snapdragon_x24_lte_modem, snapdragon_x24_lte_modem_firmware, snapdragon_x50_5g_modem-rf, snapdragon_x50_5g_modem-rf_firmware, snapdragon_x55_5g_modem-rf, snapdragon_x55_5g_modem-rf_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, snapdragon_x65_5g_modem-rf, snapdragon_x65_5g_modem-rf_firmware, snapdragon_x70_modem-rf, snapdragon_x70_modem-rf_firmware, snapdragon_x75_5g_modem-rf, snapdragon_x75_5g_modem-rf_firmware, snapdragon_xr1, snapdragon_xr1_firmware, snapdragon_xr2_5g, snapdragon_xr2_5g_firmware, sw5100, sw5100_firmware, sw5100p, sw5100p_firmware, sxr1120, sxr1120_firmware, sxr2130, sxr2130_firmware, video_collaboration_vc1_platform, video_collaboration_vc1_platform_firmware, video_collaboration_vc3_platform, video_collaboration_vc3_platform_firmware, vision_intelligence_100, vision_intelligence_100_firmware, vision_intelligence_200, vision_intelligence_200_firmware, vision_intelligence_300, vision_intelligence_300_firmware, vision_intelligence_400, vision_intelligence_400_firmware, wcd9306, wcd9306_firmware, wcd9326, wcd9326_firmware, wcd9330, wcd9330_firmware, wcd9335, wcd9335_firmware, wcd9340, wcd9340_firmware, wcd9341, wcd9341_firmware, wcd9360, wcd9360_firmware, wcd9370, wcd9370_firmware, wcd9371, wcd9371_firmware, wcd9375, wcd9375_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcd9390, wcd9390_firmware, wcd9395, wcd9395_firmware, wcn3610, wcn3610_firmware, wcn3615, wcn3615_firmware, wcn3620, wcn3620_firmware, wcn3660b, wcn3660b_firmware, wcn3680, wcn3680_firmware, wcn3680b, wcn3680b_firmware, wcn3910, wcn3910_firmware, wcn3950, wcn3950_firmware, wcn3980, wcn3980_firmware, wcn3988, wcn3988_firmware, wcn3990, wcn3990_firmware, wcn6740, wcn6740_firmware, wsa8810, wsa8810_firmware, wsa8815, wsa8815_firmware, wsa8830, wsa8830_firmware, wsa8832, wsa8832_firmware, wsa8835, wsa8835_firmware, wsa8840, wsa8840_firmware, wsa8845, wsa8845_firmware, wsa8845h, wsa8845h_firmware. Check the affected products table above for specific version ranges.

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.