PT-2019-18118 · Marvell · Marvell Avastar Wi-Fi

Denis Selianin · Published 2019-01-19 · Updated 2020-08-24 · CVE-2019-6496

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via malformed Wi-Fi packets during identification of available Wi-Fi networks. This can potentially lead to exploitation of the host application processor, depending on factors such as host OS hardening and DMA availability.

Recommendations For Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, consider disabling the Wi-Fi network identification feature until a patch is available to prevent exploitation. Restrict access to the Wi-Fi device to minimize the risk of arbitrary code execution or denial of service.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-6496

Affected Products

Marvell Avastar Wi-Fi

References · 8

• 🔥 https://2018.zeronights.ru/wp-content/uploads/materials/19-Researching-Marvell-Avastar-Wi-Fi.pdf · Exploit
• 🔥 https://zdnet.com/article/wifi-firmware-bug-affects-laptops-smartphones-routers-gaming-devices · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-6496 · Security Note
• https://scribd.com/document/398350818/WiFi-CVE-2019-6496-Marvell-s-Statement · Note
• https://embedi.org/blog/remotely-compromise-devices-by-using-bugs-in-marvell-avastar-wi-fi-from-zero-knowledge-to-zero-click-rce · Note
• https://synology.com/security/advisory/Synology_SA_19_07 · Note
• http://securityfocus.com/bid/106865 · Note
• https://kb.cert.org/vuls/id/730261 · Note