CVE-2017-9711 MEDIUM

CVE-2017-9711: Permissions, Privileges, and Access Controls in Data

Vendor Qualcomm, Inc.
Product Snapdragon
Weakness CWE-264
Published November 22, 2024
Last update November 22, 2024
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Certain unprivileged processes are able to perform IOCTL calls.

Key dates

02Disclosure timeline

November 22, 2024 CVE published
November 22, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-34149 WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability CVE-2022-45066 WordPress WooSwipe WooCommerce Gallery plugin <= 2.0.1 - Auth. Broken Access Control vulnerability CVE-2022-33198 WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability CVE-2022-41978 WordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerability CVE-2022-38461 WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability