PT-2017-2984 · Broadcom · Bcm4355C0

Gal Beniamini

·

Publicado

2017-06-12

·

Atualizado

2019-03-13

·

CVE-2017-11120

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Broadcom BCM4355C0 Wi-Fi chips version 9.44.78.27.0.1.56
Description The issue is caused by a buffer overflow in the Wi-Fi firmware. An attacker can craft a malformed RRM neighbor report frame to trigger this overflow. Exploitation of the issue may allow a remote attacker to impact the confidentiality, integrity, and availability of data.
Recommendations For Broadcom BCM4355C0 Wi-Fi chips version 9.44.78.27.0.1.56, consider disabling the Wi-Fi firmware until a patch is available to prevent exploitation of the buffer overflow. As a temporary workaround, restrict access to the RRM neighbor report frame to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2017-02326
CVE-2017-11120

Produtos afetados

Bcm4355C0