CVE-2021-1976
highpriority · track · 40EPSS 0.008 · 56 %ileDEEUUSEPSS · scored 2026-10-23
A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSIMATIC RF160B (6GT2003-0FA00)siemens_psirt
Update to V2.2 or later version
- MitigationSIMATIC RF160B (6GT2003-0FA00)cisa_csaf_ot
Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 9–10
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (251)
Products and version ranges known to be affected.
- Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking≤ APQ8009, APQ8009W, APQ8017, APQ8064AU, APQ8096AU, AQT1000, AR7420, AR8031, AR8035, AR9380, CSR8811, CSRA6620, CSRA6640, CSRB31024, FSM10055, FSM10056, IPQ4018, IPQ4019, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ5028, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8065, IPQ8068, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM9150, MDM9206, MDM9250, MDM9607, MDM9626, MDM9628, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8996AU, PMP8074, QCA4024, QCA6174, QCA6174A, QCA6310, QCA6320, QCA6335, QCA6390, QCA6391, QCA6420, QCA6426, QCA6428, QCA6430, QCA6436, QCA6438, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6694, QCA6696, QCA7500, QCA7520, QCA7550, QCA8072, QCA8075, QCA8081, QCA8337, QCA9367, QCA9377, QCA9531, QCA9558, QCA9561, QCA9563, QCA9880, QCA9882, QCA9886, QCA9887, QCA9888, QCA9889, QCA9896, QCA9898, QCA9980, QCA9982, QCA9984, QCA9985, QCA9986, ...[truncated*]enisa_euvdEU
advisories (3)
Vendor and ecosystem advisories describing this.
- SSA-770721SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.22024-03-12csaf · siemens_psirtDE
SIMATIC RF160B contain multiple vulnerabilities of different types that could allow an attacker to execute arbitrary code within the context of a privileged process. Siemens has released a new version for SIMATIC RF160B and recommends to update to the latest version.
- ICSA-24-074-07Siemens SIMATIC2024-03-14icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code within the context of a privileged process.
- ASB-A-1870744822021-08-01vendor · osvUS
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- https://device.harmonyos.com/cn/docs/security/update/security-bulletins-wearables-202109-0000001196190833cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-1976cnnvd
- https://vigilance.fr/vulnerability/Google-Android-Pixel-multiple-vulnerabilities-of-August-2021-36034cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.2606cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021080305cnnvd
- https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletincnnvd
- https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin#_cve-2021-1916Patchcnnvd
- https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletinenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan