Vulnerabilities

CVE-2021-30293

January 12, 2022

Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

Summary:

Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

Reference Links(if available):

https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin

CVSS Score (if available)

v2: / HIGH

v3: /

Links to Exploits(if available)

Tags: CONFIRM, CVE, CVE-2021-30293, Vendor Advisory, vulnerability

CVE-2021-30293

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

Active Exploitation of Vulnerabilities in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Products.

CACTUS Ransomware Victim: https://www[.]ghimli[.]com /

Cisco Products Multiple Vulnerabilities

T2 – 94,584 breached accounts

CISA: CISA Releases Three Industrial Control Systems Advisories

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Active Exploitation of Vulnerabilities in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Products.

CACTUS Ransomware Victim: https://www[.]ghimli[.]com /

Cisco Products Multiple Vulnerabilities

T2 – 94,584 breached accounts

CISA: CISA Releases Three Industrial Control Systems Advisories