CVE-2023-33070 (GCVE-0-2023-33070)

Vulnerability from cvelistv5 – Published: 2023-12-05 03:04 – Updated: 2025-05-29 13:31
VLAI
Title
Improper Authentication in Automotive OS
Summary
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
SSVC
Exploitation: poc Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-05-29 13:31 UTC
CWE
  • CWE-287 - Improper Authentication
Assigner
qualcomm CNA
Impacted products
Vendor Product Version
Qualcomm, Inc. Snapdragon Affected: AQT1000
Affected: AR8031
Affected: AR8035
Affected: C-V2X 9150
Affected: CSRA6620
Affected: CSRA6640
Affected: CSRB31024
Affected: FastConnect 6200
Affected: QAM8255P
Affected: QAM8295P
Affected: QAM8775P
Affected: QCA6174A
Affected: QCA6310
Affected: QCA6335
Affected: QCA6391
Affected: QCA6420
Affected: QCA6430
Affected: QCA6564
Affected: QCA6564AU
Affected: QCA6574
Affected: QCA6574A
Affected: QCA6574AU
Affected: QCA6595
Affected: QCA6595AU
Affected: QCA6696
Affected: QCA6698AQ
Affected: QCA8337
Affected: QCA9377
Affected: QCM6125
Affected: QCN9074
Affected: QCS410
Affected: QCS610
Affected: QCS6125
Affected: QCS8155
Affected: Qualcomm 205 Mobile Platform
Affected: Qualcomm 215 Mobile Platform
Affected: Qualcomm Video Collaboration VC1 Platform
Affected: Qualcomm Video Collaboration VC3 Platform
Affected: Robotics RB3 Platform
Affected: SA6145P
Affected: SA6150P
Affected: SA6155
Affected: SA6155P
Affected: SA8145P
Affected: SA8150P
Affected: SA8155
Affected: SA8155P
Affected: SA8195P
Affected: SA8255P
Affected: SA8295P
Affected: SA8540P
Affected: SA8770P
Affected: SA8775P
Affected: SA9000P
Affected: SD 675
Affected: SD660
Affected: SD675
Affected: SD730
Affected: SD855
Affected: SDM429W
Affected: SDX55
Affected: Smart Audio 400 Platform
Affected: Snapdragon 210 Processor
Affected: Snapdragon 212 Mobile Platform
Affected: Snapdragon 429 Mobile Platform
Affected: Snapdragon 660 Mobile Platform
Affected: Snapdragon 665 Mobile Platform
Affected: Snapdragon 675 Mobile Platform
Affected: Snapdragon 678 Mobile Platform (SM6150-AC)
Affected: Snapdragon 730 Mobile Platform (SM7150-AA)
Affected: Snapdragon 730G Mobile Platform (SM7150-AB)
Affected: Snapdragon 732G Mobile Platform (SM7150-AC)
Affected: Snapdragon 845 Mobile Platform
Affected: Snapdragon 855 Mobile Platform
Affected: Snapdragon 855+/860 Mobile Platform (SM8150-AC)
Affected: Snapdragon Auto 5G Modem-RF
Affected: Snapdragon Wear 4100+ Platform
Affected: Snapdragon X24 LTE Modem
Affected: Snapdragon Auto 4G Modem
Affected: Vision Intelligence 300 Platform
Affected: Vision Intelligence 400 Platform
Affected: WCD9326
Affected: WCD9335
Affected: WCD9340
Affected: WCD9341
Affected: WCD9360
Affected: WCD9370
Affected: WCD9371
Affected: WCD9375
Affected: WCN3610
Affected: WCN3615
Affected: WCN3620
Affected: WCN3660B
Affected: WCN3680
Affected: WCN3680B
Affected: WCN3950
Affected: WCN3980
Affected: WCN3990
Affected: WSA8810
Affected: WSA8815
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:32:46.677Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-33070",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-29T13:31:22.998134Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-29T13:31:38.841Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Snapdragon Auto",
            "Snapdragon Consumer IOT",
            "Snapdragon Industrial IOT",
            "Snapdragon Mobile",
            "Snapdragon Wearables"
          ],
          "product": "Snapdragon",
          "vendor": "Qualcomm, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "AQT1000"
            },
            {
              "status": "affected",
              "version": "AR8031"
            },
            {
              "status": "affected",
              "version": "AR8035"
            },
            {
              "status": "affected",
              "version": "C-V2X 9150"
            },
            {
              "status": "affected",
              "version": "CSRA6620"
            },
            {
              "status": "affected",
              "version": "CSRA6640"
            },
            {
              "status": "affected",
              "version": "CSRB31024"
            },
            {
              "status": "affected",
              "version": "FastConnect 6200"
            },
            {
              "status": "affected",
              "version": "QAM8255P"
            },
            {
              "status": "affected",
              "version": "QAM8295P"
            },
            {
              "status": "affected",
              "version": "QAM8775P"
            },
            {
              "status": "affected",
              "version": "QCA6174A"
            },
            {
              "status": "affected",
              "version": "QCA6310"
            },
            {
              "status": "affected",
              "version": "QCA6335"
            },
            {
              "status": "affected",
              "version": "QCA6391"
            },
            {
              "status": "affected",
              "version": "QCA6420"
            },
            {
              "status": "affected",
              "version": "QCA6430"
            },
            {
              "status": "affected",
              "version": "QCA6564"
            },
            {
              "status": "affected",
              "version": "QCA6564AU"
            },
            {
              "status": "affected",
              "version": "QCA6574"
            },
            {
              "status": "affected",
              "version": "QCA6574A"
            },
            {
              "status": "affected",
              "version": "QCA6574AU"
            },
            {
              "status": "affected",
              "version": "QCA6595"
            },
            {
              "status": "affected",
              "version": "QCA6595AU"
            },
            {
              "status": "affected",
              "version": "QCA6696"
            },
            {
              "status": "affected",
              "version": "QCA6698AQ"
            },
            {
              "status": "affected",
              "version": "QCA8337"
            },
            {
              "status": "affected",
              "version": "QCA9377"
            },
            {
              "status": "affected",
              "version": "QCM6125"
            },
            {
              "status": "affected",
              "version": "QCN9074"
            },
            {
              "status": "affected",
              "version": "QCS410"
            },
            {
              "status": "affected",
              "version": "QCS610"
            },
            {
              "status": "affected",
              "version": "QCS6125"
            },
            {
              "status": "affected",
              "version": "QCS8155"
            },
            {
              "status": "affected",
              "version": "Qualcomm 205 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Qualcomm 215 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC1 Platform"
            },
            {
              "status": "affected",
              "version": "Qualcomm Video Collaboration VC3 Platform"
            },
            {
              "status": "affected",
              "version": "Robotics RB3 Platform"
            },
            {
              "status": "affected",
              "version": "SA6145P"
            },
            {
              "status": "affected",
              "version": "SA6150P"
            },
            {
              "status": "affected",
              "version": "SA6155"
            },
            {
              "status": "affected",
              "version": "SA6155P"
            },
            {
              "status": "affected",
              "version": "SA8145P"
            },
            {
              "status": "affected",
              "version": "SA8150P"
            },
            {
              "status": "affected",
              "version": "SA8155"
            },
            {
              "status": "affected",
              "version": "SA8155P"
            },
            {
              "status": "affected",
              "version": "SA8195P"
            },
            {
              "status": "affected",
              "version": "SA8255P"
            },
            {
              "status": "affected",
              "version": "SA8295P"
            },
            {
              "status": "affected",
              "version": "SA8540P"
            },
            {
              "status": "affected",
              "version": "SA8770P"
            },
            {
              "status": "affected",
              "version": "SA8775P"
            },
            {
              "status": "affected",
              "version": "SA9000P"
            },
            {
              "status": "affected",
              "version": "SD 675"
            },
            {
              "status": "affected",
              "version": "SD660"
            },
            {
              "status": "affected",
              "version": "SD675"
            },
            {
              "status": "affected",
              "version": "SD730"
            },
            {
              "status": "affected",
              "version": "SD855"
            },
            {
              "status": "affected",
              "version": "SDM429W"
            },
            {
              "status": "affected",
              "version": "SDX55"
            },
            {
              "status": "affected",
              "version": "Smart Audio 400 Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 210 Processor"
            },
            {
              "status": "affected",
              "version": "Snapdragon 212 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 429 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 660 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 665 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 675 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 678 Mobile Platform (SM6150-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 730 Mobile Platform (SM7150-AA)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 730G Mobile Platform (SM7150-AB)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 732G Mobile Platform (SM7150-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon 845 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 855 Mobile Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)"
            },
            {
              "status": "affected",
              "version": "Snapdragon Auto 5G Modem-RF"
            },
            {
              "status": "affected",
              "version": "Snapdragon Wear 4100+ Platform"
            },
            {
              "status": "affected",
              "version": "Snapdragon X24 LTE Modem"
            },
            {
              "status": "affected",
              "version": "Snapdragon Auto 4G Modem"
            },
            {
              "status": "affected",
              "version": "Vision Intelligence 300 Platform"
            },
            {
              "status": "affected",
              "version": "Vision Intelligence 400 Platform"
            },
            {
              "status": "affected",
              "version": "WCD9326"
            },
            {
              "status": "affected",
              "version": "WCD9335"
            },
            {
              "status": "affected",
              "version": "WCD9340"
            },
            {
              "status": "affected",
              "version": "WCD9341"
            },
            {
              "status": "affected",
              "version": "WCD9360"
            },
            {
              "status": "affected",
              "version": "WCD9370"
            },
            {
              "status": "affected",
              "version": "WCD9371"
            },
            {
              "status": "affected",
              "version": "WCD9375"
            },
            {
              "status": "affected",
              "version": "WCN3610"
            },
            {
              "status": "affected",
              "version": "WCN3615"
            },
            {
              "status": "affected",
              "version": "WCN3620"
            },
            {
              "status": "affected",
              "version": "WCN3660B"
            },
            {
              "status": "affected",
              "version": "WCN3680"
            },
            {
              "status": "affected",
              "version": "WCN3680B"
            },
            {
              "status": "affected",
              "version": "WCN3950"
            },
            {
              "status": "affected",
              "version": "WCN3980"
            },
            {
              "status": "affected",
              "version": "WCN3990"
            },
            {
              "status": "affected",
              "version": "WSA8810"
            },
            {
              "status": "affected",
              "version": "WSA8815"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Transient DOS in Automotive OS due to improper authentication to the secure IO calls."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-12T16:11:52.248Z",
        "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "shortName": "qualcomm"
      },
      "references": [
        {
          "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin"
        }
      ],
      "title": "Improper Authentication in Automotive OS"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
    "assignerShortName": "qualcomm",
    "cveId": "CVE-2023-33070",
    "datePublished": "2023-12-05T03:04:12.248Z",
    "dateReserved": "2023-05-17T09:28:53.131Z",
    "dateUpdated": "2025-05-29T13:31:38.841Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T15:32:46.677Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-33070",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-05-29T13:31:22.998134Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-05-29T13:31:33.641Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Snapdragon Auto",
                "Snapdragon Consumer IOT",
                "Snapdragon Industrial IOT",
                "Snapdragon Mobile",
                "Snapdragon Wearables"
              ],
              "product": "Snapdragon",
              "vendor": "Qualcomm, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "AQT1000"
                },
                {
                  "status": "affected",
                  "version": "AR8031"
                },
                {
                  "status": "affected",
                  "version": "AR8035"
                },
                {
                  "status": "affected",
                  "version": "C-V2X 9150"
                },
                {
                  "status": "affected",
                  "version": "CSRA6620"
                },
                {
                  "status": "affected",
                  "version": "CSRA6640"
                },
                {
                  "status": "affected",
                  "version": "CSRB31024"
                },
                {
                  "status": "affected",
                  "version": "FastConnect 6200"
                },
                {
                  "status": "affected",
                  "version": "QAM8255P"
                },
                {
                  "status": "affected",
                  "version": "QAM8295P"
                },
                {
                  "status": "affected",
                  "version": "QAM8775P"
                },
                {
                  "status": "affected",
                  "version": "QCA6174A"
                },
                {
                  "status": "affected",
                  "version": "QCA6310"
                },
                {
                  "status": "affected",
                  "version": "QCA6335"
                },
                {
                  "status": "affected",
                  "version": "QCA6391"
                },
                {
                  "status": "affected",
                  "version": "QCA6420"
                },
                {
                  "status": "affected",
                  "version": "QCA6430"
                },
                {
                  "status": "affected",
                  "version": "QCA6564"
                },
                {
                  "status": "affected",
                  "version": "QCA6564AU"
                },
                {
                  "status": "affected",
                  "version": "QCA6574"
                },
                {
                  "status": "affected",
                  "version": "QCA6574A"
                },
                {
                  "status": "affected",
                  "version": "QCA6574AU"
                },
                {
                  "status": "affected",
                  "version": "QCA6595"
                },
                {
                  "status": "affected",
                  "version": "QCA6595AU"
                },
                {
                  "status": "affected",
                  "version": "QCA6696"
                },
                {
                  "status": "affected",
                  "version": "QCA6698AQ"
                },
                {
                  "status": "affected",
                  "version": "QCA8337"
                },
                {
                  "status": "affected",
                  "version": "QCA9377"
                },
                {
                  "status": "affected",
                  "version": "QCM6125"
                },
                {
                  "status": "affected",
                  "version": "QCN9074"
                },
                {
                  "status": "affected",
                  "version": "QCS410"
                },
                {
                  "status": "affected",
                  "version": "QCS610"
                },
                {
                  "status": "affected",
                  "version": "QCS6125"
                },
                {
                  "status": "affected",
                  "version": "QCS8155"
                },
                {
                  "status": "affected",
                  "version": "Qualcomm 205 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Qualcomm 215 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Qualcomm Video Collaboration VC1 Platform"
                },
                {
                  "status": "affected",
                  "version": "Qualcomm Video Collaboration VC3 Platform"
                },
                {
                  "status": "affected",
                  "version": "Robotics RB3 Platform"
                },
                {
                  "status": "affected",
                  "version": "SA6145P"
                },
                {
                  "status": "affected",
                  "version": "SA6150P"
                },
                {
                  "status": "affected",
                  "version": "SA6155"
                },
                {
                  "status": "affected",
                  "version": "SA6155P"
                },
                {
                  "status": "affected",
                  "version": "SA8145P"
                },
                {
                  "status": "affected",
                  "version": "SA8150P"
                },
                {
                  "status": "affected",
                  "version": "SA8155"
                },
                {
                  "status": "affected",
                  "version": "SA8155P"
                },
                {
                  "status": "affected",
                  "version": "SA8195P"
                },
                {
                  "status": "affected",
                  "version": "SA8255P"
                },
                {
                  "status": "affected",
                  "version": "SA8295P"
                },
                {
                  "status": "affected",
                  "version": "SA8540P"
                },
                {
                  "status": "affected",
                  "version": "SA8770P"
                },
                {
                  "status": "affected",
                  "version": "SA8775P"
                },
                {
                  "status": "affected",
                  "version": "SA9000P"
                },
                {
                  "status": "affected",
                  "version": "SD 675"
                },
                {
                  "status": "affected",
                  "version": "SD660"
                },
                {
                  "status": "affected",
                  "version": "SD675"
                },
                {
                  "status": "affected",
                  "version": "SD730"
                },
                {
                  "status": "affected",
                  "version": "SD855"
                },
                {
                  "status": "affected",
                  "version": "SDM429W"
                },
                {
                  "status": "affected",
                  "version": "SDX55"
                },
                {
                  "status": "affected",
                  "version": "Smart Audio 400 Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 210 Processor"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 212 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 429 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 660 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 665 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 675 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 678 Mobile Platform (SM6150-AC)"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 730 Mobile Platform (SM7150-AA)"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 730G Mobile Platform (SM7150-AB)"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 732G Mobile Platform (SM7150-AC)"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 845 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 855 Mobile Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon 855+/860 Mobile Platform (SM8150-AC)"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon Auto 5G Modem-RF"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon Wear 4100+ Platform"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon X24 LTE Modem"
                },
                {
                  "status": "affected",
                  "version": "Snapdragon Auto 4G Modem"
                },
                {
                  "status": "affected",
                  "version": "Vision Intelligence 300 Platform"
                },
                {
                  "status": "affected",
                  "version": "Vision Intelligence 400 Platform"
                },
                {
                  "status": "affected",
                  "version": "WCD9326"
                },
                {
                  "status": "affected",
                  "version": "WCD9335"
                },
                {
                  "status": "affected",
                  "version": "WCD9340"
                },
                {
                  "status": "affected",
                  "version": "WCD9341"
                },
                {
                  "status": "affected",
                  "version": "WCD9360"
                },
                {
                  "status": "affected",
                  "version": "WCD9370"
                },
                {
                  "status": "affected",
                  "version": "WCD9371"
                },
                {
                  "status": "affected",
                  "version": "WCD9375"
                },
                {
                  "status": "affected",
                  "version": "WCN3610"
                },
                {
                  "status": "affected",
                  "version": "WCN3615"
                },
                {
                  "status": "affected",
                  "version": "WCN3620"
                },
                {
                  "status": "affected",
                  "version": "WCN3660B"
                },
                {
                  "status": "affected",
                  "version": "WCN3680"
                },
                {
                  "status": "affected",
                  "version": "WCN3680B"
                },
                {
                  "status": "affected",
                  "version": "WCN3950"
                },
                {
                  "status": "affected",
                  "version": "WCN3980"
                },
                {
                  "status": "affected",
                  "version": "WCN3990"
                },
                {
                  "status": "affected",
                  "version": "WSA8810"
                },
                {
                  "status": "affected",
                  "version": "WSA8815"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Transient DOS in Automotive OS due to improper authentication to the secure IO calls."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-287",
                  "description": "CWE-287 Improper Authentication",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-04-12T16:11:52.248Z",
            "orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
            "shortName": "qualcomm"
          },
          "references": [
            {
              "url": "https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin"
            }
          ],
          "title": "Improper Authentication in Automotive OS"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
        "assignerShortName": "qualcomm",
        "cveId": "CVE-2023-33070",
        "datePublished": "2023-12-05T03:04:12.248Z",
        "dateReserved": "2023-05-17T09:28:53.131Z",
        "dateUpdated": "2025-05-29T13:31:38.841Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
Events included in the timeline

Loading timeline…


    Loading…

    Loading…

    Loading…

    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.