CVE-2017-6957

Опубликовано: 27 мар. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming and the feature is enabled in RAM, allows remote attackers to execute arbitrary code via a crafted reassociation response frame with a Cisco IE (156).

Ссылки

http://packetstormsecurity.com/files/141803/Broadcom-Stack-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/97054
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1051
Third Party Advisory
http://packetstormsecurity.com/files/141803/Broadcom-Stack-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/97054
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1051
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:broadcom:bcm4339_soc_firmware:6.37.34.40:*:*:*:*:*:*:*

cpe:2.3:h:broadcom:bcm4339_soc:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09709

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-4x5g-qmwf-pjhp