PT-2017-19088 · Infineon · Infineon S-Gold 2

Jesse Michael + 2 · Published 2017-08-07 · Updated 2025-05-06 · CVE-2017-9633

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Infineon S-Gold 2 (PMB 8876) chipset versions used in various vehicle models produced between 2009-2016

Description An issue with improper restriction of operations within the bounds of a memory buffer was found. This issue may allow an attacker to access and control memory, potentially enabling remote code execution on the baseband radio processor of the Telematics Control Unit (TCU). The vulnerability is related to the temporary mobile subscriber identity (TMSI).

Recommendations For the Infineon S-Gold 2 (PMB 8876) chipset used in the affected vehicle models, consider restricting access to the vulnerable TMSI component until a patch or fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-9633

Affected Products

Infineon S-Gold 2

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-9633 · Security Note
• http://securityfocus.com/bid/100132 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01 · Note
• https://t.me/cvenotify/120996 · Telegram Post