Attacker Value
Unknown
0
CVE-2021-1928
0
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2021-1928
(Last updated November 28, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
MITRE ATT&CK
Select the MITRE ATT&CK Tactics that apply to this CVE
Collection
Select any Techniques used:
Command and Control
Select any Techniques used:
Credential Access
Select any Techniques used:
Defense Evasion
Select any Techniques used:
Discovery
Select any Techniques used:
Execution
Select any Techniques used:
Exfiltration
Select any Techniques used:
Impact
Select any Techniques used:
Initial Access
Select any Techniques used:
Lateral Movement
Select any Techniques used:
Persistence
Select any Techniques used:
Privilege Escalation
Select any Techniques used:
Topic Tags
Select the tags that apply to this CVE (Assessment added tags are disabled and cannot be removed)
What makes this of high-value to an attacker?
What makes this of low-value to an attacker?
Description
Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
6.1 Medium
Impact Score:
5.2
Exploitability Score:
0.9
Attack Vector (AV):
Physical
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
None
Availability (A):
High
General Information
Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking APQ8009, APQ8053, AR9380, CSR8811, IPQ4018, IPQ4019, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8065, IPQ8068, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM9206, PMP8074, QCA4024, QCA6310, QCA6320, QCA6335, QCA6428, QCA6438, QCA6694, QCA7500, QCA8072, QCA8075, QCA8081, QCA9367, QCA9377, QCA9531, QCA9558, QCA9561, QCA9563, QCA9880, QCA9882, QCA9886, QCA9887, QCA9888, QCA9889, QCA9896, QCA9898, QCA9980, QCA9982, QCA9984, QCA9985, QCA9990, QCA9992, QCA9994, QCN5021, QCN5022, QCN5024, QCN5052, QCN5054, QCN5064, QCN5121, QCN5122, QCN5124, QCN5152, QCN5154, QCN5164, QCN5500, QCN5502, QCN5550, QCN6023, QCN6024, QCN9000, QCN9012, QCN9022, QCN9024, QCN9070, QCN9072, QCN9074, QCN9100, QFE1922, QFE1952, Qualcomm215, SD205, SD210, SDA429W, WCD9326, WCD9330, WCD9340, WCN3610, WCN3620, WCN3660B, WCN3680B, WCN3980, WSA8810, WSA8815
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown
Vendors
Products
- apq8009 firmware -,
- apq8053 firmware -,
- ar9380 firmware -,
- csr8811 firmware -,
- ipq4018 firmware -,
- ipq4019 firmware -,
- ipq4028 firmware -,
- ipq4029 firmware -,
- ipq5010 firmware -,
- ipq5018 firmware -,
- ipq6000 firmware -,
- ipq6005 firmware -,
- ipq6010 firmware -,
- ipq6018 firmware -,
- ipq6028 firmware -,
- ipq8064 firmware -,
- ipq8065 firmware -,
- ipq8068 firmware -,
- ipq8069 firmware -,
- ipq8070 firmware -,
- ipq8070a firmware -,
- ipq8071 firmware -,
- ipq8071a firmware -,
- ipq8072 firmware -,
- ipq8072a firmware -,
- ipq8074 firmware -,
- ipq8074a firmware -,
- ipq8076 firmware -,
- ipq8076a firmware -,
- ipq8078 firmware -,
- ipq8078a firmware -,
- ipq8173 firmware -,
- ipq8174 firmware -,
- mdm9206 firmware -,
- pmp8074 firmware -,
- qca4024 firmware -,
- qca6310 firmware -,
- qca6320 firmware -,
- qca6335 firmware -,
- qca6428 firmware -,
- qca6438 firmware -,
- qca6694 firmware -,
- qca7500 firmware -,
- qca8072 firmware -,
- qca8075 firmware -,
- qca8081 firmware -,
- qca9367 firmware -,
- qca9377 firmware -,
- qca9531 firmware -,
- qca9558 firmware -,
- qca9561 firmware -,
- qca9563 firmware -,
- qca9880 firmware -,
- qca9882 firmware -,
- qca9886 firmware -,
- qca9887 firmware -,
- qca9888 firmware -,
- qca9889 firmware -,
- qca9896 firmware -,
- qca9898 firmware -,
- qca9980 firmware -,
- qca9982 firmware -,
- qca9984 firmware -,
- qca9985 firmware -,
- qca9990 firmware -,
- qca9992 firmware -,
- qca9994 firmware -,
- qcn5021 firmware -,
- qcn5022 firmware -,
- qcn5024 firmware -,
- qcn5052 firmware -,
- qcn5054 firmware -,
- qcn5064 firmware -,
- qcn5121 firmware -,
- qcn5122 firmware -,
- qcn5124 firmware -,
- qcn5152 firmware -,
- qcn5154 firmware -,
- qcn5164 firmware -,
- qcn5500 firmware -,
- qcn5502 firmware -,
- qcn5550 firmware -,
- qcn6023 firmware -,
- qcn6024 firmware -,
- qcn9000 firmware -,
- qcn9012 firmware -,
- qcn9022 firmware -,
- qcn9024 firmware -,
- qcn9070 firmware -,
- qcn9072 firmware -,
- qcn9074 firmware -,
- qcn9100 firmware -,
- qfe1922 firmware -,
- qfe1952 firmware -,
- qualcomm215 firmware -,
- sd205 firmware -,
- sd210 firmware -,
- sda429w firmware -,
- wcd9326 firmware -,
- wcd9330 firmware -,
- wcd9340 firmware -,
- wcn3610 firmware -,
- wcn3620 firmware -,
- wcn3660b firmware -,
- wcn3680b firmware -,
- wcn3980 firmware -,
- wsa8810 firmware -,
- wsa8815 firmware -
References
Additional Info
Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Rapid7
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
