CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2023-43551
High (7.5) in qualcomm. EPSS 0.3% chance of exploitation in the next 30 days.
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:205_mobile_firmware
- qualcomm:215_mobile_firmware
- qualcomm:315_5g_iot_modem_firmware
- qualcomm:9205_lte_modem_firmware
- qualcomm:9206_lte_modem_firmware
- qualcomm:9207_lte_modem_firmware
- qualcomm:apq8017_firmware
- qualcomm:apq8037_firmware
- qualcomm:aqt1000_firmware
- qualcomm:ar6003_firmware
- qualcomm:ar8035_firmware
- qualcomm:c-v2x_9150_firmware
- qualcomm:csra6620_firmware
- qualcomm:csra6640_firmware
- qualcomm:csrb31024_firmware
- qualcomm:fastconnect_6200_firmware
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6800_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:mdm8207_firmware
- qualcomm:mdm9205s_firmware
- qualcomm:mdm9230_firmware
- qualcomm:mdm9250_firmware
- qualcomm:mdm9330_firmware
- qualcomm:mdm9615_firmware
- qualcomm:mdm9628_firmware
- qualcomm:mdm9630_firmware
- qualcomm:mdm9640_firmware
- qualcomm:msm8108_firmware
- qualcomm:msm8209_firmware
- qualcomm:msm8608_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8996au_firmware
- qualcomm:qca4004_firmware
- qualcomm:qca6174_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6310_firmware
- qualcomm:qca6320_firmware
- qualcomm:qca6335_firmware
- qualcomm:qca6391_firmware
- qualcomm:qca6420_firmware
- qualcomm:qca6421_firmware
- qualcomm:qca6426_firmware
- qualcomm:qca6430_firmware
- qualcomm:qca6431_firmware
- qualcomm:qca6436_firmware
- qualcomm:qca6564a_firmware
- qualcomm:qca6564au_firmware
- qualcomm:qca6574_firmware