Back to the CVE list
CVE-2025-27064

Vulnerability in Qualcomm Fastconnect 6900 Firmware

CVSS score

6.1

EPSS probability

%0.1

Risk score

0.0

Published

11 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-27064 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Information disclosure while registering commands from clients with diag through diagHal.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-27064 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1qualcommfastconnect 6900 firmware View
2qualcommfastconnect 6900 View
3qualcommfastconnect 7800 firmware View
4qualcommfastconnect 7800 View
5qualcommimmersive home 3210 platform firmware View
6qualcommimmersive home 3210 platform View
7qualcommimmersive home 326 platform firmware View
8qualcommimmersive home 326 platform View
9qualcommipq5300 firmware View
10qualcommipq5300 View
11qualcommipq5302 firmware View
12qualcommipq5302 View
13qualcommipq5312 firmware View
14qualcommipq5312 View
15qualcommipq5332 firmware View
16qualcommipq5332 View
17qualcommipq5424 firmware View
18qualcommipq5424 View
19qualcommipq9008 firmware View
20qualcommipq9008 View
21qualcommipq9048 firmware View
22qualcommipq9048 View
23qualcommipq9554 firmware View
24qualcommipq9554 View
25qualcommipq9570 firmware View
26qualcommipq9570 View
27qualcommipq9574 firmware View
28qualcommipq9574 View
29qualcommmdm9628 firmware View
30qualcommmdm9628 View
31qualcommqam8255p firmware View
32qualcommqam8255p View
33qualcommqam8650p firmware View
34qualcommqam8650p View
35qualcommqca0000 firmware View
36qualcommqca0000 View
37qualcommqca6564a firmware View
38qualcommqca6564a View
39qualcommqca6564au firmware View
40qualcommqca6564au View
41qualcommqca6574a firmware View
42qualcommqca6574a View
43qualcommqca6574au firmware View
44qualcommqca6574au View
45qualcommqca6584au firmware View
46qualcommqca6584au View
47qualcommqca6595au firmware View
48qualcommqca6595au View
49qualcommqca6678aq firmware View
50qualcommqca6678aq View
51qualcommqca6688aq firmware View
52qualcommqca6688aq View
53qualcommqca6698aq firmware View
54qualcommqca6698aq View
55qualcommqca8075 firmware View
56qualcommqca8075 View
57qualcommqca8080 firmware View
58qualcommqca8080 View
59qualcommqca8081 firmware View
60qualcommqca8081 View
61qualcommqca8082 firmware View
62qualcommqca8082 View
63qualcommqca8084 firmware View
64qualcommqca8084 View
65qualcommqca8085 firmware View
66qualcommqca8085 View
67qualcommqca8101 firmware View
68qualcommqca8101 View
69qualcommqca8102 firmware View
70qualcommqca8102 View
71qualcommqca8111 firmware View
72qualcommqca8111 View
73qualcommqca8112 firmware View
74qualcommqca8112 View
75qualcommqca8384 firmware View
76qualcommqca8384 View
77qualcommqca8385 firmware View
78qualcommqca8385 View
79qualcommqca8386 firmware View
80qualcommqca8386 View
81qualcommqca9367 firmware View
82qualcommqca9367 View
83qualcommqca9377 firmware View
84qualcommqca9377 View
85qualcommqcf8000 firmware View
86qualcommqcf8000 View
87qualcommqcf8001 firmware View
88qualcommqcf8001 View
89qualcommqcn5124 firmware View
90qualcommqcn5124 View
91qualcommqcn5224 firmware View
92qualcommqcn5224 View
93qualcommqcn6402 firmware View
94qualcommqcn6402 View
95qualcommqcn6412 firmware View
96qualcommqcn6412 View
97qualcommqcn6422 firmware View
98qualcommqcn6422 View
99qualcommqcn6432 firmware View
100qualcommqcn6432 View
101qualcommqcn9000 firmware View
102qualcommqcn9000 View
103qualcommqcn9012 firmware View
104qualcommqcn9012 View
105qualcommqcn9024 firmware View
106qualcommqcn9024 View
107qualcommqcn9074 firmware View
108qualcommqcn9074 View
109qualcommqcn9160 firmware View
110qualcommqcn9160 View
111qualcommqcn9274 firmware View
112qualcommqcn9274 View
113qualcommqxm8083 firmware View
114qualcommqxm8083 View
115qualcommsa4150p firmware View
116qualcommsa4150p View
117qualcommsa4155p firmware View
118qualcommsa4155p View
119qualcommsa6155p firmware View
120qualcommsa6155p View
121qualcommsa7255p firmware View
122qualcommsa7255p View
123qualcommsa8155p firmware View
124qualcommsa8155p View
125qualcommsa8195p firmware View
126qualcommsa8195p View
127qualcommsa8255p firmware View
128qualcommsa8255p View
129qualcommsa8530p firmware View
130qualcommsa8530p View
131qualcommsa8540p firmware View
132qualcommsa8540p View
133qualcommsa8650p firmware View
134qualcommsa8650p View
135qualcommsa9000p firmware View
136qualcommsa9000p View
137qualcommsnapdragon 8 gen 1 mobile platform firmware View
138qualcommsnapdragon 8 gen 1 mobile platform View
139qualcommsnapdragon auto 5g modem-rf gen 2 firmware View
140qualcommsnapdragon auto 5g modem-rf gen 2 View
141qualcommsxr2250p firmware View
142qualcommsxr2250p View
143qualcommwcd9380 firmware View
144qualcommwcd9380 View
145qualcommwcn3660b firmware View
146qualcommwcn3660b View
147qualcommwcn3680b firmware View
148qualcommwcn3680b View
149qualcommwcn3980 firmware View
150qualcommwcn3980 View
151qualcommwsa8830 firmware View
152qualcommwsa8830 View
153qualcommwsa8835 firmware View
154qualcommwsa8835 View
Total affected vendors: 1|Products: 154

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.1CVSS V31MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:LNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-27064 is associated with the following CWEs:

CWE-126: Common Weakness Enumeration Entry CWE-126

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-27064 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.htmlvendor-advisory

CVSS Vector Radar Chart

6.1 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityLow

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)Low

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

Q
qualcomm logo
qualcomm

Weakness Type (CWE & CAPEC)

CWE-126

Similar Vulnerabilities

6.5
CVE-2020-3702Vulnerability in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking
QI
Qualcomm, Inc. logo
VendorQualcomm, Inc.ProductSnapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking+27 etkilenen
Patch status unknownEPSS %06 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-27064"
CVE-2025-27064 · Vulnerability in Qualcomm Fastconnect 6900…