CVE-2024-33063

Q: What is the severity of CVE-2024-33063?

CVE-2024-33063 has a CVSS score of 7.5 (HIGH). This vulnerability allows an attacker to cause a denial-of-service (DoS) condition by sending specially crafted beacon frames with malformed Multi-Link (ML) Information Elements. It affects devices using Qualcomm Wi-Fi chipsets that parse these frames, potentially disrupting wireless connectivity.

7.5 HIGH

Denial of Service

📋 TL;DR

This vulnerability allows an attacker to cause a denial-of-service (DoS) condition by sending specially crafted beacon frames with malformed Multi-Link (ML) Information Elements. It affects devices using Qualcomm Wi-Fi chipsets that parse these frames, potentially disrupting wireless connectivity.

💻 Affected Systems

Products:

Qualcomm Wi-Fi chipsets and devices using them

Versions: Specific versions not publicly detailed; refer to Qualcomm advisory for affected chipsets.

Operating Systems: Any OS using vulnerable Qualcomm Wi-Fi drivers/firmware

Default Config Vulnerable: ⚠️ Yes

Notes: Vulnerability is in the ML IE parsing logic; affects devices with Wi-Fi enabled.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete wireless network disruption for affected devices, requiring reboot or reconnection to restore functionality.

🟠

Likely Case

Temporary loss of Wi-Fi connectivity on vulnerable devices when exposed to malicious beacon frames.

🟢

If Mitigated

Minimal impact with proper network segmentation and monitoring in place.

🌐 Internet-Facing: MEDIUM - Requires proximity to target network but can be exploited wirelessly.

🏢 Internal Only: MEDIUM - Internal attackers with wireless access could disrupt local network connectivity.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Exploitation requires crafting and transmitting malicious beacon frames; no authentication needed.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to Qualcomm security bulletin for specific firmware/driver updates.

Vendor Advisory: https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html

Restart Required: Yes

Instructions:

1. Check device manufacturer for firmware updates. 2. Apply Qualcomm-provided patches for affected chipsets. 3. Reboot device after update.

🔧 Temporary Workarounds

Disable Wi-Fi if not needed

all

Turn off Wi-Fi on vulnerable devices to prevent exploitation.

Network segmentation

all

Isolate vulnerable devices on separate network segments to limit attack surface.

🧯 If You Can't Patch

Monitor for unusual beacon frame activity using wireless intrusion detection systems.
Implement strict access controls to limit who can connect to Wi-Fi networks.

🔍 How to Verify

Check if Vulnerable:

Check device specifications against Qualcomm's affected chipsets list in the advisory.

Check Version:

Device-specific; typically 'iwconfig' or manufacturer-provided tools on Linux, or device settings on other OSes.

Verify Fix Applied:

Verify firmware/driver version matches patched versions specified by manufacturer.

📡 Detection & Monitoring

Log Indicators:

Unexpected device disconnections
Wi-Fi driver crash logs

Network Indicators:

Unusual beacon frame patterns
Spike in malformed ML IE packets

SIEM Query:

Search for events related to Wi-Fi interface resets or driver failures.

📊 Metadata

CVE ID: CVE-2024-33063

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-190

Published: December 2, 2024

Last Updated: December 12, 2024

🔗 References

https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html Patch,Vendor Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ar8035 Firmware by Qualcomm

Fastconnect 6900 Firmware by Qualcomm

Fastconnect 7800 Firmware by Qualcomm

Immersive Home 3210 Platform Firmware by Qualcomm

Immersive Home 326 Platform Firmware by Qualcomm

Ipq5300 Firmware by Qualcomm

Ipq5312 Firmware by Qualcomm

Ipq5332 Firmware by Qualcomm

Ipq9008 Firmware by Qualcomm

Ipq9554 Firmware by Qualcomm

Ipq9570 Firmware by Qualcomm

Ipq9574 Firmware by Qualcomm

Qam8255p Firmware by Qualcomm

Qam8295p Firmware by Qualcomm

Qam8650p Firmware by Qualcomm

Qam8775p Firmware by Qualcomm

Qamsrv1h Firmware by Qualcomm

Qamsrv1m Firmware by Qualcomm

Qca0000 Firmware by Qualcomm

Qca6391 Firmware by Qualcomm

Qca6554a Firmware by Qualcomm

Qca6564au Firmware by Qualcomm

Qca6574 Firmware by Qualcomm

Qca6574a Firmware by Qualcomm

Qca6574au Firmware by Qualcomm

Qca6584au Firmware by Qualcomm

Qca6595 Firmware by Qualcomm

Qca6595au Firmware by Qualcomm

Qca6678aq Firmware by Qualcomm

Qca6688aq Firmware by Qualcomm

Qca6696 Firmware by Qualcomm

Qca6698aq Firmware by Qualcomm

Qca6777aq Firmware by Qualcomm

Qca6787aq Firmware by Qualcomm

Qca6797aq Firmware by Qualcomm

Qca8075 Firmware by Qualcomm

Qca8081 Firmware by Qualcomm

Qca8082 Firmware by Qualcomm

Qca8084 Firmware by Qualcomm

Qca8085 Firmware by Qualcomm

Qca8337 Firmware by Qualcomm

Qca8386 Firmware by Qualcomm

Qcc710 Firmware by Qualcomm

Qcf8000 Firmware by Qualcomm

Qcf8001 Firmware by Qualcomm

Qcm8550 Firmware by Qualcomm

Qcn5124 Firmware by Qualcomm

Qcn6224 Firmware by Qualcomm

Qcn6274 Firmware by Qualcomm

Qcn6402 Firmware by Qualcomm

Qcn6412 Firmware by Qualcomm

Qcn6422 Firmware by Qualcomm

Qcn6432 Firmware by Qualcomm

Qcn9000 Firmware by Qualcomm

Qcn9024 Firmware by Qualcomm

Qcn9074 Firmware by Qualcomm

Qcn9274 Firmware by Qualcomm

Qcs6490 Firmware by Qualcomm

Qcs7230 Firmware by Qualcomm

Qcs8250 Firmware by Qualcomm

Qcs8550 Firmware by Qualcomm

Qfw7114 Firmware by Qualcomm

Qfw7124 Firmware by Qualcomm

Sa6155p Firmware by Qualcomm

Sa7255p Firmware by Qualcomm

Sa7775p Firmware by Qualcomm

Sa8155p Firmware by Qualcomm

Sa8195p Firmware by Qualcomm

Sa8255p Firmware by Qualcomm

Sa8295p Firmware by Qualcomm

Sa8620p Firmware by Qualcomm

Sa8650p Firmware by Qualcomm

Sa8770p Firmware by Qualcomm

Sa8775p Firmware by Qualcomm

Sa9000p Firmware by Qualcomm

Sdm429w Firmware by Qualcomm

Sdx65m Firmware by Qualcomm