CVE-2021-1976
highPriorität · verfolgen · 40EPSS 0.008 · 56. PerzentilDEEUUSEPSS · bewertet 2026-10-23
A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSIMATIC RF160B (6GT2003-0FA00)siemens_psirt
Update to V2.2 or later version
- MitigationSIMATIC RF160B (6GT2003-0FA00)cisa_csaf_ot
Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 9–10
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (251)
Betroffene Produkte und Versionsbereiche.
- Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking≤ APQ8009, APQ8009W, APQ8017, APQ8064AU, APQ8096AU, AQT1000, AR7420, AR8031, AR8035, AR9380, CSR8811, CSRA6620, CSRA6640, CSRB31024, FSM10055, FSM10056, IPQ4018, IPQ4019, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ5028, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8065, IPQ8068, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM9150, MDM9206, MDM9250, MDM9607, MDM9626, MDM9628, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8996AU, PMP8074, QCA4024, QCA6174, QCA6174A, QCA6310, QCA6320, QCA6335, QCA6390, QCA6391, QCA6420, QCA6426, QCA6428, QCA6430, QCA6436, QCA6438, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6694, QCA6696, QCA7500, QCA7520, QCA7550, QCA8072, QCA8075, QCA8081, QCA8337, QCA9367, QCA9377, QCA9531, QCA9558, QCA9561, QCA9563, QCA9880, QCA9882, QCA9886, QCA9887, QCA9888, QCA9889, QCA9896, QCA9898, QCA9980, QCA9982, QCA9984, QCA9985, QCA9986, ...[truncated*]enisa_euvdEU
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-770721SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.22024-03-12csaf · siemens_psirtDE
SIMATIC RF160B contain multiple vulnerabilities of different types that could allow an attacker to execute arbitrary code within the context of a privileged process. Siemens has released a new version for SIMATIC RF160B and recommends to update to the latest version.
- ICSA-24-074-07Siemens SIMATIC2024-03-14icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code within the context of a privileged process.
- ASB-A-1870744822021-08-01vendor · osvUS
auch bekannt als (5)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (9)
Externe Belege — Patches, Meldungen, Analysen.
- https://device.harmonyos.com/cn/docs/security/update/security-bulletins-wearables-202109-0000001196190833cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-1976cnnvd
- https://vigilance.fr/vulnerability/Google-Android-Pixel-multiple-vulnerabilities-of-August-2021-36034cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.2606cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021080305cnnvd
- https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletincnnvd
- https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin#_cve-2021-1916Patchcnnvd
- https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletinenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan