PT-2017-2025 · Broadcom · Broadcom Wi-Fi Driver

Publicado 2017-04-21 · Atualizado 2017-05-02 · CVE-2016-2433

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Broadcom Wi-Fi driver for Android versions prior to Build AAE570

Description The issue is related to insufficient access control in the Broadcom Wi-Fi driver for Android, which can be exploited by remote attackers to execute arbitrary code in the context of the kernel.

Recommendations For versions prior to Build AAE570, update to Build AAE570 or later to resolve the issue. As a temporary workaround, consider restricting access to the Wi-Fi driver until a patch is available.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2017-01192

CVE-2016-2433

Produtos afetados

Broadcom Wi-Fi Driver

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-2433 · Aviso do Fabricante
• http://support.blackberry.com/kb/articleDetail?articleNumber=000038167 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-01192 · Nota de Segurança
• http://securityfocus.com/bid/98034 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-2433 · Nota de Segurança