Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Samsung Exynos Processors: Unrestricted RRC Setup Attempts Cause Battery Drain

CVE-2024-46921 · published 1 year ago
Summary

Certain Samsung Exynos processors do not limit the number of attempts for setting up a 5G connection, which can lead to a device's battery draining rapidly. This issue affects multiple Exynos models, including Exynos 9820, 9825, 980, and others. Businesses using these processors should be aware of this potential issue and consider updating their devices or implementing workarounds to prevent excessive battery drain.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
samsung exynos_1080_firmware All versions
cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*
samsung exynos_1280_firmware All versions
cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
samsung exynos_1330_firmware All versions
cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*
samsung exynos_1380_firmware All versions
cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*
samsung exynos_1480_firmware All versions
cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*
samsung exynos_2100_firmware All versions
cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*
samsung exynos_2200_firmware All versions
cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
samsung exynos_2400_firmware All versions
cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*
samsung exynos_9110_firmware All versions
cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*
samsung exynos_980_firmware All versions
cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*
samsung exynos_9820_firmware All versions
cpe:2.3:o:samsung:exynos_9820_firmware:-:*:*:*:*:*:*:*
samsung exynos_9825_firmware All versions
cpe:2.3:o:samsung:exynos_9825_firmware:-:*:*:*:*:*:*:*
samsung exynos_990_firmware All versions
cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*
samsung exynos_modem_5123_firmware All versions
cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*
samsung exynos_modem_5300_firmware All versions
cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*
samsung exynos_modem_5400_firmware All versions
cpe:2.3:o:samsung:exynos_modem_5400_firmware:-:*:*:*:*:*:*:*
samsung exynos_w1000_firmware All versions
cpe:2.3:o:samsung:exynos_w1000_firmware:-:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W1000, Modem 5123, Modem 5300, Modem 5400. UE does n...
An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W1000, Modem 5123, Modem 5300, Modem 5400. UE does not limit the number of attempts for the RRC Setup procedure in the 5G SA, leading to a denial of service (battery-drain attack).
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-770Allocation of Resources Without Limits
Timeline
Published13 Jan 2025
Updated31 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-46921 · NVD
Track software like this
Free during beta