CVE Vulnerability

CVE-2018-3624

Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network.

5.4 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 5.5 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

8.3 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 6

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr Vendor Advisory
http://www.securityfocus.com/bid/103968 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02 Third Party Advisory US Government Resource
Configurations

Configuration 1
Information

Published : 2018-04-05 04:29

Updated : 2018-05-10 02:13

NVD link : CVE-2018-3624

Mitre link : CVE-2018-3624

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer