PT-2012-4138 · Broadcom · Bcm4329+1

Andres Blanco + 1 · Published 2012-11-14 · Updated 2013-02-05 · CVE-2012-2619

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Broadcom BCM4325 and BCM4329 Wi-Fi chips (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and Wi-Fi outage, via an RSN 802.11i information element.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-2619

Affected Products

Bcm4325

Bcm4329

References · 8

• 🔥 http://coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329 · Exploit
• 🔥 https://exploit-db.com/exploits/22739 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-2619 · Security Note
• http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html · Vendor Advisory
• http://kb.cert.org/vuls/id/160027 · Note
• http://support.apple.com/kb/HT5643 · Note
• http://support.apple.com/kb/HT5642 · Note