CVE-2023-43511

Q: What is the severity of CVE-2023-43511?

CVE-2023-43511 has a CVSS score of 7.5 (HIGH). This vulnerability allows attackers to cause a denial-of-service (DoS) condition in Qualcomm WLAN firmware by sending specially crafted IPv6 packets with IPPROTO_NONE as the next header in extension headers. It affects devices with Qualcomm WLAN chipsets that process IPv6 traffic. The vulnerability can cause temporary service disruption until the system recovers or reboots.

7.5 HIGH

Denial of Service

📋 TL;DR

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in Qualcomm WLAN firmware by sending specially crafted IPv6 packets with IPPROTO_NONE as the next header in extension headers. It affects devices with Qualcomm WLAN chipsets that process IPv6 traffic. The vulnerability can cause temporary service disruption until the system recovers or reboots.

💻 Affected Systems

Products:

Qualcomm WLAN chipsets/firmware

Versions: Specific versions not publicly detailed in advisory; check Qualcomm January 2024 bulletin for exact affected versions.

Operating Systems: Any OS using affected Qualcomm WLAN hardware/firmware

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with IPv6 enabled on WLAN interfaces. Requires IPv6 connectivity to the vulnerable WLAN component.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Persistent DoS requiring device reboot, disrupting wireless connectivity for all users on affected access points or devices.

🟠

Likely Case

Temporary service interruption affecting wireless connectivity until the system automatically recovers from the transient DoS condition.

🟢

If Mitigated

Minimal impact with proper network segmentation and IPv6 filtering in place.

🌐 Internet-Facing: MEDIUM - Requires IPv6 connectivity and ability to send crafted packets to WLAN interface.

🏢 Internal Only: MEDIUM - Internal attackers with network access could disrupt wireless services.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

Exploitation requires sending crafted IPv6 packets to vulnerable WLAN interfaces. No authentication needed if network access is available.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check device manufacturer updates; Qualcomm has provided fixes to OEMs.

Vendor Advisory: https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin

Restart Required: Yes

Instructions:

1. Check with device manufacturer for firmware updates. 2. Apply manufacturer-provided firmware updates for affected WLAN components. 3. Reboot device after update installation.

🔧 Temporary Workarounds

Disable IPv6 on WLAN interfaces

all

Prevents processing of IPv6 packets that trigger the vulnerability

Platform-specific commands to disable IPv6 on wireless interfaces

Filter IPv6 traffic to WLAN interfaces

all

Block or filter IPv6 packets containing IPPROTO_NONE in extension headers

firewall rules to block suspicious IPv6 packets

🧯 If You Can't Patch

Segment network to restrict access to WLAN management interfaces
Implement network monitoring for anomalous IPv6 traffic patterns

🔍 How to Verify

Check if Vulnerable:

Check device firmware version against manufacturer's vulnerability list. Review Qualcomm advisory for affected chipset models.

Check Version:

Manufacturer-specific command to check WLAN firmware version (varies by device)

Verify Fix Applied:

Verify firmware version has been updated to manufacturer's patched version. Test IPv6 connectivity remains functional.

📡 Detection & Monitoring

Log Indicators:

WLAN firmware crash/restart logs
Unexpected wireless interface resets
Increased IPv6 packet processing errors

Network Indicators:

Spike in IPv6 packets with IPPROTO_NONE header
Unusual IPv6 traffic to WLAN interfaces

SIEM Query:

Search for WLAN interface resets combined with IPv6 traffic patterns

📊 Metadata

CVE ID: CVE-2023-43511

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-835

Published: January 2, 2024

Last Updated: August 11, 2025

🔗 References

https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

315 5g Iot Modem Firmware by Qualcomm

9206 Lte Modem Firmware by Qualcomm

Apq8017 Firmware by Qualcomm

Apq8064au Firmware by Qualcomm

Apq8092 Firmware by Qualcomm

Apq8094 Firmware by Qualcomm

Aqt1000 Firmware by Qualcomm

Ar8031 Firmware by Qualcomm

Ar8035 Firmware by Qualcomm

Ar9380 Firmware by Qualcomm

Csr8811 Firmware by Qualcomm

Csra6620 Firmware by Qualcomm

Csra6640 Firmware by Qualcomm

Csrb31024 Firmware by Qualcomm

Fastconnect 6200 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Platform Firmware by Qualcomm

Home Hub 100 Platform Firmware by Qualcomm

Immersive Home 214 Platform Firmware by Qualcomm

Immersive Home 216 Platform Firmware by Qualcomm

Immersive Home 316 Platform Firmware by Qualcomm

Immersive Home 318 Platform Firmware by Qualcomm

Immersive Home 3210 Platform Firmware by Qualcomm

Immersive Home 326 Platform Firmware by Qualcomm

Ipq4018 Firmware by Qualcomm

Ipq4028 Firmware by Qualcomm

Ipq4029 Firmware by Qualcomm

Ipq5010 Firmware by Qualcomm

Ipq5028 Firmware by Qualcomm

Ipq5332 Firmware by Qualcomm

Ipq6000 Firmware by Qualcomm

Ipq6010 Firmware by Qualcomm

Ipq6018 Firmware by Qualcomm

Ipq6028 Firmware by Qualcomm

Ipq8064 Firmware by Qualcomm

Ipq8065 Firmware by Qualcomm

Ipq8068 Firmware by Qualcomm

Ipq8069 Firmware by Qualcomm

Ipq8070 Firmware by Qualcomm

Ipq8070a Firmware by Qualcomm

Ipq8071a Firmware by Qualcomm

Ipq8072a Firmware by Qualcomm

Ipq8074 Firmware by Qualcomm

Ipq8074a Firmware by Qualcomm

Ipq8076 Firmware by Qualcomm

Ipq8076a Firmware by Qualcomm

Ipq8078 Firmware by Qualcomm

Ipq8078a Firmware by Qualcomm

Ipq8173 Firmware by Qualcomm

Ipq8174 Firmware by Qualcomm

Ipq9008 Firmware by Qualcomm

Ipq9554 Firmware by Qualcomm

Ipq9570 Firmware by Qualcomm

Ipq9574 Firmware by Qualcomm

Mdm9250 Firmware by Qualcomm

Mdm9628 Firmware by Qualcomm

Mdm9640 Firmware by Qualcomm

Mdm9645 Firmware by Qualcomm

Mdm9650 Firmware by Qualcomm

Msm8996au Firmware by Qualcomm

Pmp8074 Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qca0000 Firmware by Qualcomm

Qca1023 Firmware by Qualcomm

Qca1062 Firmware by Qualcomm

Qca1064 Firmware by Qualcomm

Qca1990 Firmware by Qualcomm

Qca2062 Firmware by Qualcomm

Qca2064 Firmware by Qualcomm

Qca2065 Firmware by Qualcomm

Qca2066 Firmware by Qualcomm