CVE-2021-1896
MEDIUMCVSS 4.3/10EPSS 0.17%
Last modified
CVE-2021-1896 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Aqt1000 Firmware | All versions |
| Qualcomm | Qca6164 Firmware | All versions |
| Qualcomm | Qca6174 Firmware | All versions |
| Qualcomm | Qca6174a Firmware | All versions |
| Qualcomm | Qca6420 Firmware | All versions |
| Qualcomm | Qca6430 Firmware | All versions |
| Qualcomm | Qca9377 Firmware | All versions |
| Qualcomm | Sc8180x Firmware | All versions |
| Qualcomm | Sd 8c Firmware | All versions |
| Qualcomm | Sd 8cx Firmware | All versions |
| Qualcomm | Sd7c Firmware | All versions |
| Qualcomm | Sd850 Firmware | All versions |
| Qualcomm | Sm6250 Firmware | All versions |
| Qualcomm | Wcd9340 Firmware | All versions |
| Qualcomm | Wcd9341 Firmware | All versions |
| Qualcomm | Wcn3990 Firmware | All versions |
| Qualcomm | Wcn3991 Firmware | All versions |
| Qualcomm | Wcn3998 Firmware | All versions |
| Qualcomm | Wcn6850 Firmware | All versions |
| Qualcomm | Wsa8810 Firmware | All versions |
| Qualcomm | Wsa8815 Firmware | All versions |
| Qualcomm | Sdx55 Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-1896?
Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity
How severe is CVE-2021-1896?
CVE-2021-1896 has a CVSS score of 4.3/10 (MEDIUM severity). The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2021-1896?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-1889Possible buffer overflow due to lack of length check in Trus…7.8
- CVE-2021-1890Improper length check of public exponent in RSA import key f…7.8
- CVE-2021-1891A possible use-after-free occurrence in audio driver can hap…7.8
- CVE-2021-1892Memory corruption due to improper input validation while pro…7.8
- CVE-2021-1894Improper access control in TrustZone due to improper error h…7.8
- CVE-2021-1895Possible integer overflow due to improper length check while…7.8
- CVE-2021-1897Possible Buffer Over-read due to lack of validation of bound…4.6
- CVE-2021-1898Possible buffer over-read due to incorrect overflow check wh…4.6
- CVE-2021-1899Possible buffer over read due to lack of length check while …4.6
- CVE-2021-1900Possible use after free in Display due to race condition whi…7
- CVE-2021-1901Possible buffer over-read due to lack of length check while …4.6
- CVE-2021-1903Possible denial of service scenario can occur due to lack of…5.3
Are you affected by CVE-2021-1896?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST