CVE-2023-33105
HIGHCVSS 7.5/10EPSS 0.75%
Last modified
CVE-2023-33105 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.. EPSS estimates a 0.75% chance of exploitation in the next 30 days.
Description
Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Ar8035 Firmware | All versions |
| Qualcomm | Ar9380 Firmware | All versions |
| Qualcomm | Csr8811 Firmware | All versions |
| Qualcomm | Fastconnect 6700 Firmware | All versions |
| Qualcomm | Fastconnect 6900 Firmware | All versions |
| Qualcomm | Fastconnect 7800 Firmware | All versions |
| Qualcomm | Flight Rb5 5g Firmware | All versions |
| Qualcomm | Immersive Home 214 Firmware | All versions |
| Qualcomm | Immersive Home 216 Firmware | All versions |
| Qualcomm | Immersive Home 316 Firmware | All versions |
| Qualcomm | Immersive Home 318 Firmware | All versions |
| Qualcomm | Immersive Home 3210 Firmware | All versions |
| Qualcomm | Immersive Home 326 Firmware | All versions |
| Qualcomm | Ipq4018 Firmware | All versions |
| Qualcomm | Ipq4019 Firmware | All versions |
| Qualcomm | Ipq4028 Firmware | All versions |
| Qualcomm | Ipq4029 Firmware | All versions |
| Qualcomm | Ipq5010 Firmware | All versions |
| Qualcomm | Ipq5028 Firmware | All versions |
| Qualcomm | Ipq5302 Firmware | All versions |
| Qualcomm | Ipq5312 Firmware | All versions |
| Qualcomm | Ipq5332 Firmware | All versions |
| Qualcomm | Ipq6000 Firmware | All versions |
| Qualcomm | Ipq6005 Firmware | All versions |
| Qualcomm | Ipq6010 Firmware | All versions |
| Qualcomm | Ipq6018 Firmware | All versions |
| Qualcomm | Ipq6028 Firmware | All versions |
| Qualcomm | Ipq8064 Firmware | All versions |
| Qualcomm | Ipq8065 Firmware | All versions |
| Qualcomm | Ipq8068 Firmware | All versions |
| Qualcomm | Ipq8070 Firmware | All versions |
| Qualcomm | Ipq8070a Firmware | All versions |
| Qualcomm | Ipq8071 Firmware | All versions |
| Qualcomm | Ipq8071a Firmware | All versions |
| Qualcomm | Ipq8072 Firmware | All versions |
| Qualcomm | Ipq8072a Firmware | All versions |
| Qualcomm | Ipq8074 Firmware | All versions |
| Qualcomm | Ipq8074a Firmware | All versions |
| Qualcomm | Ipq8076 Firmware | All versions |
| Qualcomm | Ipq8076a Firmware | All versions |
| Qualcomm | Ipq8078 Firmware | All versions |
| Qualcomm | Ipq8078a Firmware | All versions |
| Qualcomm | Ipq8173 Firmware | All versions |
| Qualcomm | Ipq8174 Firmware | All versions |
| Qualcomm | Ipq9008 Firmware | All versions |
| Qualcomm | Ipq9554 Firmware | All versions |
| Qualcomm | Ipq9570 Firmware | All versions |
| Qualcomm | Ipq9574 Firmware | All versions |
| Qualcomm | Pmp8074 Firmware | All versions |
| Qualcomm | Qca0000 Firmware | All versions |
Showing 50 of 149 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-33105?
Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.
How severe is CVE-2023-33105?
CVE-2023-33105 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.75% probability of exploitation in the next 30 days.
How do I fix CVE-2023-33105?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-33099Transient DOS while processing SMS container of non-standard…7.5
- CVE-2023-3310A vulnerability, which was classified as critical, has been …8.8
- CVE-2023-33100Transient DOS while processing DL NAS Transport message when…7.5
- CVE-2023-33101Transient DOS while processing DL NAS TRANSPORT message with…7.5
- CVE-2023-33103Transient DOS while processing CAG info IE received from NW.7.5
- CVE-2023-33104Transient DOS while processing PDU Release command with a pa…7.5
- CVE-2023-33106Memory corruption while submitting a large list of sync poin…7.8
- CVE-2023-33107Memory corruption in Graphics Linux while assigning shared v…7.8
- CVE-2023-33108Memory corruption in Graphics Driver when destroying a conte…7.8
- CVE-2023-33109Transient DOS while processing a WMI P2P listen start comman…7.5
- CVE-2023-3311A vulnerability, which was classified as problematic, was fo…5.4
- CVE-2023-33110The session index variable in PCM host voice audio driver in…7
Are you affected by CVE-2023-33105?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
