多款Qualcomm产品注入漏洞

漏洞信息详情

多款Qualcomm产品注入漏洞

CNNVD编号：CNNVD-202105-647
危害等级：中危-->
危害等级：中危
CVE编号： CVE-2020-26140
漏洞类型：注入
发布时间： 2021-05-11
威胁类型：远程或本地
更新时间： 2021-11-29
厂商：
漏洞来源： Hitachi ABB Power ...

漏洞简介

Qualcomm 芯片是美国高通（Qualcomm）公司的芯片。一种将电路（主要包括半导体设备，也包括被动组件等）小型化的方式，并时常制造在半导体晶圆表面上。

Qualcomm 芯片存在注入漏洞。攻击者可以注入独立于网络配置的任意数据帧。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.wi-fi.org/security-update-fragmentation

参考网址

来源:MISC

链接:https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63

来源:MLIST

链接:http://www.openwall.com/lists/oss-security/2021/05/11/12

来源:CISCO

链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu

来源:MISC

链接:https://www.fragattacks.com

来源:MISC

链接:https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md

来源:CONFIRM

链接:https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021051212

来源:www.qualcomm.com

链接:https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin

来源:device.harmonyos.com

链接:https://device.harmonyos.com/cn/docs/security/update/security-bulletins-wearables-202111-0000001172568432

来源:support.lenovo.com

链接:https://support.lenovo.com/us/en/product_security/LEN-61212

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/164875/Red-Hat-Security-Advisory-2021-4140-02.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2876

来源:source.android.com

链接:https://source.android.com/security/bulletin/2021-10-01

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3905

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1628

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3825

来源:tools.cisco.com

链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021100407

来源:us-cert.cisa.gov

链接:https://us-cert.cisa.gov/ics/advisories/icsa-21-236-01

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021051814

来源:www.huawei.com

链接:https://www.huawei.com/cn/psirt/security-notices/huawei-sn-20210513-01-fragattacks-cn

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Wi-Fi-Devices-multiple-vulnerabilities-via-FragAttacks-35386

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021051915

受影响实体

暂无

补丁

Microsoft ALFA USB Windows 10 注入漏洞的修复措施

正文

多款Qualcomm产品注入漏洞

漏洞信息详情