Security Resilience

CVE-2023-21641

Qualcomm Fastconnect 6900 Firmware

Published
04 July 2023
Modified
21 November 2024
Patch / advisory
CVSS Score v3.1 6.6
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
EPSS Score 0.0011 1th percentile
Risk Priority 47 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-21641 is a medium-severity an unspecified weakness vulnerability in Qualcomm Fastconnect 6900 Firmware. Its CVSS base score is 6.6 (Medium).

Operationally, ranked at the 1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

An app with non-privileged access can change global system brightness and cause undesired system behavior.

CWE(s)

Related Threats

CVEs Like This One

CVE-2024-23376Same product: Qualcomm Fastconnect 6900
CVE-2023-22384Same product: Qualcomm Qca6574Au
CVE-2024-23374Same product: Qualcomm Fastconnect 6900
CVE-2023-21642Same product: Qualcomm Qca6574Au
CVE-2024-43061Same product: Qualcomm Fastconnect 6900
CVE-2023-21638Same product: Qualcomm Fastconnect 6900
CVE-2024-53011Same product: Qualcomm Fastconnect 6900
CVE-2023-33071Same product: Qualcomm Qca6574Au
CVE-2023-28579Same product: Qualcomm Fastconnect 6900
CVE-2023-21640Same product: Qualcomm Fastconnect 6900

Affected Assets

qualcomm
fastconnect 6900 firmware
all versions
qualcomm
fastconnect 7800 firmware
all versions
qualcomm
qca6574au firmware
all versions
qualcomm
qca6696 firmware
all versions
qualcomm
sa6145p firmware
all versions
qualcomm
sa6150p firmware
all versions
qualcomm
sa6155p firmware
all versions
qualcomm
sa8145p firmware
all versions
qualcomm
sa8150p firmware
all versions
qualcomm
sa8155p firmware
all versions
+5 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References