CVE-2024-45556

MEDIUM
Published Apr 7, 2025 Modified Aug 19, 2025 CWE-1262

Description

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

CVSS v3.1 Score

6.5
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness Type (CWE)

CWE-1262 CWE-1262

Affected Products

Vendor Product
qualcomm fastconnect_6900_firmware
qualcomm fastconnect_6900
qualcomm fastconnect_7800_firmware
qualcomm fastconnect_7800
qualcomm immersive_home_3210_platform_firmware
qualcomm immersive_home_3210_platform
qualcomm immersive_home_326_platform_firmware
qualcomm immersive_home_326_platform
qualcomm ipq5300_firmware
qualcomm ipq5300
qualcomm ipq5302_firmware
qualcomm ipq5302
qualcomm ipq5312_firmware
qualcomm ipq5312
qualcomm ipq5332_firmware
qualcomm ipq5332
qualcomm ipq9008_firmware
qualcomm ipq9008
qualcomm ipq9048_firmware
qualcomm ipq9048
qualcomm ipq9554_firmware
qualcomm ipq9554
qualcomm ipq9570_firmware
qualcomm ipq9570
qualcomm ipq9574_firmware
qualcomm ipq9574
qualcomm qca0000_firmware
qualcomm qca0000
qualcomm qca8075_firmware
qualcomm qca8075
qualcomm qca8081_firmware
qualcomm qca8081
qualcomm qca8082_firmware
qualcomm qca8082
qualcomm qca8084_firmware
qualcomm qca8084
qualcomm qca8085_firmware
qualcomm qca8085
qualcomm qca8386_firmware
qualcomm qca8386
qualcomm qcf8000_firmware
qualcomm qcf8000
qualcomm qcf8000sfp_firmware
qualcomm qcf8000sfp
qualcomm qcf8001_firmware
qualcomm qcf8001
qualcomm qcn5124_firmware
qualcomm qcn5124
qualcomm qcn6224_firmware
qualcomm qcn6224
qualcomm qcn6402_firmware
qualcomm qcn6402
qualcomm qcn6412_firmware
qualcomm qcn6412
qualcomm qcn6422_firmware
qualcomm qcn6422
qualcomm qcn6432_firmware
qualcomm qcn6432
qualcomm qcn9000_firmware
qualcomm qcn9000
qualcomm qcn9012_firmware
qualcomm qcn9012
qualcomm qcn9013_firmware
qualcomm qcn9013
qualcomm qcn9024_firmware
qualcomm qcn9024
qualcomm qcn9074_firmware
qualcomm qcn9074
qualcomm qcn9160_firmware
qualcomm qcn9160
qualcomm qcn9274_firmware
qualcomm qcn9274
qualcomm qxm8083_firmware
qualcomm qxm8083
qualcomm sd_8_gen1_5g_firmware
qualcomm sd_8_gen1_5g
qualcomm sdm429w_firmware
qualcomm sdm429w
qualcomm sdx65m_firmware
qualcomm sdx65m
qualcomm snapdragon_429_mobile_platform_firmware
qualcomm snapdragon_429_mobile_platform
qualcomm snapdragon_ar1_gen_1_platform_firmware
qualcomm snapdragon_ar1_gen_1_platform
qualcomm snapdragon_ar1_gen_1_platform_\"luna1\"_firmware
qualcomm snapdragon_ar1_gen_1_platform_\"luna1\"
qualcomm snapdragon_ar2_gen_1_platform_firmware
qualcomm snapdragon_ar2_gen_1_platform
qualcomm snapdragon_wear_4100\+_platform_firmware
qualcomm snapdragon_wear_4100\+_platform
qualcomm snapdragon_x65_5g_modem-rf_system_firmware
qualcomm snapdragon_x65_5g_modem-rf_system
qualcomm ssg2115p_firmware
qualcomm ssg2115p
qualcomm ssg2125p_firmware
qualcomm ssg2125p
qualcomm sxr1230p_firmware
qualcomm sxr1230p
qualcomm sxr2230p_firmware
qualcomm sxr2230p
qualcomm sxr2250p_firmware
qualcomm sxr2250p
qualcomm wcd9380_firmware
qualcomm wcd9380
qualcomm wcd9385_firmware
qualcomm wcd9385
qualcomm wcn3620_firmware
qualcomm wcn3620
qualcomm wcn3660b_firmware
qualcomm wcn3660b
qualcomm wcn3680b_firmware
qualcomm wcn3680b
qualcomm wcn3980_firmware
qualcomm wcn3980
qualcomm wsa8830_firmware
qualcomm wsa8830
qualcomm wsa8832_firmware
qualcomm wsa8832
qualcomm wsa8835_firmware
qualcomm wsa8835

References

Frequently Asked Questions

What is CVE-2024-45556? +
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR. It has a CVSS v3.1 base score of 6.5 (MEDIUM).
How severe is CVE-2024-45556? +
CVE-2024-45556 has a CVSS v3.1 score of 6.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-45556? +
CVE-2024-45556 affects products from qualcomm, specifically: fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, immersive_home_3210_platform, immersive_home_3210_platform_firmware, immersive_home_326_platform, immersive_home_326_platform_firmware, ipq5300, ipq5300_firmware, ipq5302, ipq5302_firmware, ipq5312, ipq5312_firmware, ipq5332, ipq5332_firmware, ipq9008, ipq9008_firmware, ipq9048, ipq9048_firmware, ipq9554, ipq9554_firmware, ipq9570, ipq9570_firmware, ipq9574, ipq9574_firmware, qca0000, qca0000_firmware, qca8075, qca8075_firmware, qca8081, qca8081_firmware, qca8082, qca8082_firmware, qca8084, qca8084_firmware, qca8085, qca8085_firmware, qca8386, qca8386_firmware, qcf8000, qcf8000_firmware, qcf8000sfp, qcf8000sfp_firmware, qcf8001, qcf8001_firmware, qcn5124, qcn5124_firmware, qcn6224, qcn6224_firmware, qcn6402, qcn6402_firmware, qcn6412, qcn6412_firmware, qcn6422, qcn6422_firmware, qcn6432, qcn6432_firmware, qcn9000, qcn9000_firmware, qcn9012, qcn9012_firmware, qcn9013, qcn9013_firmware, qcn9024, qcn9024_firmware, qcn9074, qcn9074_firmware, qcn9160, qcn9160_firmware, qcn9274, qcn9274_firmware, qxm8083, qxm8083_firmware, sd_8_gen1_5g, sd_8_gen1_5g_firmware, sdm429w, sdm429w_firmware, sdx65m, sdx65m_firmware, snapdragon_429_mobile_platform, snapdragon_429_mobile_platform_firmware, snapdragon_ar1_gen_1_platform, snapdragon_ar1_gen_1_platform_\"luna1\", snapdragon_ar1_gen_1_platform_\"luna1\"_firmware, snapdragon_ar1_gen_1_platform_firmware, snapdragon_ar2_gen_1_platform, snapdragon_ar2_gen_1_platform_firmware, snapdragon_wear_4100\+_platform, snapdragon_wear_4100\+_platform_firmware, snapdragon_x65_5g_modem-rf_system, snapdragon_x65_5g_modem-rf_system_firmware, ssg2115p, ssg2115p_firmware, ssg2125p, ssg2125p_firmware, sxr1230p, sxr1230p_firmware, sxr2230p, sxr2230p_firmware, sxr2250p, sxr2250p_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcn3620, wcn3620_firmware, wcn3660b, wcn3660b_firmware, wcn3680b, wcn3680b_firmware, wcn3980, wcn3980_firmware, wsa8830, wsa8830_firmware, wsa8832, wsa8832_firmware, wsa8835, wsa8835_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-45556? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-45556 — free, no signup required.

Start Free Scan