Cyber Resilience

CVE-2024-21466

Medium

Published: 01 July 2024

Published
01 July 2024
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
EPSS Score 0.0017 38.5th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-21466 is a medium-severity Wrap or Wraparound (CWE-191) vulnerability in Qualcomm Fastconnect 7800 Firmware. Its CVSS base score is 6.5 (Medium).

Operationally, ranked at the 38.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Information disclosure while parsing sub-IE length during new IE generation.

CWE(s)
CWE-191

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

qualcomm
fastconnect 7800 firmware
all versions
qualcomm
immersive home 3210 platform firmware
all versions
qualcomm
immersive home 326 platform firmware
all versions
qualcomm
ipq5300 firmware
all versions
qualcomm
ipq5302 firmware
all versions
qualcomm
ipq5312 firmware
all versions
qualcomm
ipq5332 firmware
all versions
qualcomm
ipq9008 firmware
all versions
qualcomm
ipq9554 firmware
all versions
qualcomm
ipq9570 firmware
all versions
+54 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References