Timeout-based authentication vulnerability in Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile platforms

Timeout-based authentication vulnerability in Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile platforms

CVE-2021-35094 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Learn more about our Industrial Pen Testing.