PT-2018-16100 · Intel · Intel Xmm71Xx+4

Dr. Nico Golde + 1 · Published 2018-04-05 · Updated 2018-05-10 · CVE-2018-3624

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R (affected versions not specified)

Description A buffer overflow issue exists in the ETWS processing module, potentially allowing a remote attacker to execute arbitrary code via an adjacent network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-3624

Affected Products

Intel Xmm71Xx

Intel Xmm72Xx

Intel Xmm73Xx

Intel Xmm74Xx

Sofia 3G/R

References · 4

• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3624 · Security Note
• http://securityfocus.com/bid/103968 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02 · Note