CVE-2024-33020

Q: What is the severity of CVE-2024-33020?

CVE-2024-33020 has a CVSS score of 7.5 (HIGH). This vulnerability in Qualcomm chipsets allows attackers to cause a denial-of-service condition by sending specially crafted TID-to-link mapping IE elements. It affects devices using vulnerable Qualcomm wireless chipsets, potentially disrupting Wi-Fi connectivity.

7.5 HIGH

Denial of Service

📋 TL;DR

This vulnerability in Qualcomm chipsets allows attackers to cause a denial-of-service condition by sending specially crafted TID-to-link mapping IE elements. It affects devices using vulnerable Qualcomm wireless chipsets, potentially disrupting Wi-Fi connectivity.

💻 Affected Systems

Products:

Qualcomm wireless chipsets and devices using them

Versions: Specific versions not detailed in reference; check Qualcomm advisory for exact affected versions.

Operating Systems: Android, Linux-based systems using Qualcomm chipsets

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with vulnerable Qualcomm wireless firmware; exact product list in Qualcomm bulletin.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete disruption of Wi-Fi connectivity on affected devices, requiring reboot to restore functionality.

🟠

Likely Case

Temporary Wi-Fi disconnection or performance degradation on vulnerable devices.

🟢

If Mitigated

Minimal impact with proper network segmentation and updated firmware.

🌐 Internet-Facing: MEDIUM - Attackers could target exposed wireless interfaces, but requires proximity or network access.

🏢 Internal Only: MEDIUM - Internal attackers could disrupt wireless connectivity within network segments.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Requires sending crafted wireless frames; no authentication needed but requires network access.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check Qualcomm August 2024 security bulletin for specific firmware versions.

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html

Restart Required: Yes

Instructions:

1. Check device manufacturer for firmware updates. 2. Apply Qualcomm-provided firmware patches. 3. Reboot device after update.

🔧 Temporary Workarounds

Network segmentation

all

Isolate vulnerable wireless devices from untrusted networks.

Disable vulnerable features

linux

If possible, disable TID-to-link mapping features in wireless configuration.

🧯 If You Can't Patch

Implement strict network access controls to limit who can send wireless frames to vulnerable devices.
Monitor for unusual wireless disconnection patterns and implement redundancy for critical systems.

🔍 How to Verify

Check if Vulnerable:

Check device firmware version against Qualcomm's advisory; use 'dmesg | grep -i qualcomm' or manufacturer-specific commands.

Check Version:

Manufacturer-specific; typically in device settings or using 'cat /proc/version' on Linux systems.

Verify Fix Applied:

Verify firmware version has been updated to patched version from Qualcomm bulletin.

📡 Detection & Monitoring

Log Indicators:

Multiple Wi-Fi disconnection events
Kernel panic or crash logs related to wireless drivers

Network Indicators:

Unusual wireless frame patterns
Spike in management frame traffic

SIEM Query:

source="wireless_logs" AND (event="disconnect" OR event="crash") AND count > threshold

📊 Metadata

CVE ID: CVE-2024-33020

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-126

Published: August 5, 2024

Last Updated: November 20, 2024

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ar8035 Firmware by Qualcomm

Fastconnect 6700 Firmware by Qualcomm

Fastconnect 6800 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Flight Rb5 5g Platform Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8620p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6426 Firmware by Qualcomm

Qca6436 Firmware by Qualcomm

Qca6554a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qcc2073 Firmware by Qualcomm

Qcc2076 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcm5430 Firmware by Qualcomm

Qcm6490 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcs5430 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs7230 Firmware by Qualcomm

Qcs8250 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Qrb5165n Firmware by Qualcomm

Robotics Rb5 Platform Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sd865 5g Firmware by Qualcomm

Sm8550p Firmware by Qualcomm

Snapdragon 8 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 2 Mobile Platform Firmware by Qualcomm

Snapdragon 8 Gen 3 Mobile Platform Firmware by Qualcomm

Snapdragon 865 5g Mobile Platform Firmware by Qualcomm

Snapdragon 865 5g Mobile Platform Firmware by Qualcomm

Snapdragon 870 5g Mobile Platform Firmware by Qualcomm

Snapdragon Ar2 Gen 1 Platform Firmware by Qualcomm

Snapdragon Auto 5g Modem Rf Gen 2 Firmware by Qualcomm

Snapdragon X55 5g Modem Rf System Firmware by Qualcomm

Snapdragon X72 5g Modem Rf System Firmware by Qualcomm

Snapdragon X75 5g Modem Rf System Firmware by Qualcomm

Snapdragon Xr2 5g Platform Firmware by Qualcomm

Srv1h Firmware by Qualcomm

Srv1l Firmware by Qualcomm

Srv1m Firmware by Qualcomm

Ssg2115p Firmware by Qualcomm

Ssg2125p Firmware by Qualcomm