CVE-2024-45556
Improper Access Control for Register Interface in TZ Firmware
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Improper Access Control for Register Interface in TZ Firmware
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
- Record
CVE-2024-45556- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-1262
- Updated
- 2026-11-02
EUVDEUVD-2024-54377
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
- Record
EUVD-2024-54377- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-8phc-9jc2-384h
Cryptographic issue may arise because the access control configuration permits Linux to read key...
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
- Record
GHSA-8phc-9jc2-384h- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-1262
- Updated
- 2026-11-02
NVD
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
- Record
CVE-2024-45556- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-1262
- Updated
- 2026-11-02
Affected products
- qualcomm fastconnect 6900 firmware
- qualcomm fastconnect 7800 firmware
- qualcomm immersive home 3210 platform firmware
- qualcomm immersive home 326 platform firmware
- qualcomm ipq5300 firmware
- qualcomm ipq5302 firmware
- qualcomm ipq5312 firmware
- qualcomm ipq5332 firmware
- qualcomm ipq9008 firmware
- qualcomm ipq9048 firmware
- qualcomm ipq9554 firmware
- qualcomm ipq9570 firmware
Show 49 moreShow less
- qualcomm ipq9574 firmware
- qualcomm qca0000 firmware
- qualcomm qca8075 firmware
- qualcomm qca8081 firmware
- qualcomm qca8082 firmware
- qualcomm qca8084 firmware
- qualcomm qca8085 firmware
- qualcomm qca8386 firmware
- qualcomm qcf8000 firmware
- qualcomm qcf8000sfp firmware
- qualcomm qcf8001 firmware
- qualcomm qcn5124 firmware
- qualcomm qcn6224 firmware
- qualcomm qcn6402 firmware
- qualcomm qcn6412 firmware
- qualcomm qcn6422 firmware
- qualcomm qcn6432 firmware
- qualcomm qcn9000 firmware
- qualcomm qcn9012 firmware
- qualcomm qcn9013 firmware
- qualcomm qcn9024 firmware
- qualcomm qcn9074 firmware
- qualcomm qcn9160 firmware
- qualcomm qcn9274 firmware
- qualcomm qxm8083 firmware
- qualcomm sd 8 gen1 5g firmware
- qualcomm sdm429w firmware
- qualcomm sdx65m firmware
- qualcomm snapdragon 429 mobile platform firmware
- qualcomm snapdragon ar1 gen 1 platform \"luna1\" firmware
- qualcomm snapdragon ar1 gen 1 platform firmware
- qualcomm snapdragon ar2 gen 1 platform firmware
- qualcomm snapdragon wear 4100\+ platform firmware
- qualcomm snapdragon x65 5g modem-rf system firmware
- qualcomm ssg2115p firmware
- qualcomm ssg2125p firmware
- qualcomm sxr1230p firmware
- qualcomm sxr2230p firmware
- qualcomm sxr2250p firmware
- qualcomm wcd9380 firmware
- qualcomm wcd9385 firmware
- qualcomm wcn3620 firmware
- qualcomm wcn3660b firmware
- qualcomm wcn3680b firmware
- qualcomm wcn3980 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8832 firmware
- qualcomm wsa8835 firmware
- qualcomm, inc. snapdragon
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-45556 is a medium vulnerability (CVSS 6.5) in Qualcomm Fastconnect 6900 Firmware, published April 7, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.09%, the 0th percentile. No source names a fixed version.