Lucene search

[email protected]NVD:CVE-2018-3649

HistoryMay 10, 2018 - 10:29 p.m.

CVE-2018-3649

2018-05-1022:29:00

CWE-427

[email protected]

web.nvd.nist.gov

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.8%

JSON

DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel’s wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.

Affected configurations

NVD

Node

inteldual_band_wireless-ac_3160Match-

AND

inteldual_band_wireless-ac_3160Range<20.20.2.2

Node

inteldual_band_wireless-ac_7260Match-

AND

inteldual_band_wireless-ac_7260Range<20.20.2.2

Node

inteldual_band_wireless-n_7260Range<20.20.2.2

AND

inteldual_band_wireless-n_7260Match-

Node

intelwireless-n_7260Range<20.20.2.2

AND

intelwireless-n_7260Match-

Node

inteldual_band_wireless-ac_7260Range<20.20.2.2

AND

inteldual_band_wireless-ac_7260Match-

Node

inteldual_band_wireless-ac_7265Range<20.20.2.2

AND

inteldual_band_wireless-ac_7265Match-

Node

inteldual_band_wireless-n_7265Range<20.20.2.2

AND

inteldual_band_wireless-n_7265Match-

Node

intelwireless-n_7265Range<20.20.2.2

AND

intelwireless-n_7265Match-

Node

inteldual_band_wireless-ac_3165Range<20.20.2.2

AND

inteldual_band_wireless-ac_3165Match-

Node

inteldual_band_wireless-ac_7265Range<20.20.2.2

AND

inteldual_band_wireless-ac_7265Match-

Node

inteldual_band_wireless-n_7265Range<20.20.2.2

AND

inteldual_band_wireless-n_7265Match-

Node

intelwireless-n_7265Range<20.20.2.2

AND

intelwireless-n_7265Match-

Node

inteldual_band_wireless-ac_3168Range<20.20.2.2

AND

inteldual_band_wireless-ac_3168Match-

Node

inteltri-band_wireless-ac_17265Range<20.20.2.2

AND

inteltri-band_wireless-ac_17265Match-

Node

inteldual_band_wireless-ac_8260Range<20.20.2.2

AND

inteldual_band_wireless-ac_8260Match-

Node

inteltri-band_wireless-ac_18260Range<20.20.2.2

AND

inteltri-band_wireless-ac_18260Match-

Node

inteldual_band_wireless-ac_8265Range<20.20.2.2

AND

inteldual_band_wireless-ac_8265Match-

Node

inteltri-band_wireless-ac_18265Range<20.20.2.2

AND

inteltri-band_wireless-ac_18265Match-

Node

intelwireless-ac_9260Range<20.20.2.2

AND

intelwireless-ac_9260Match-

Node

intelwireless-ac_9560Range<20.20.2.2

AND

intelwireless-ac_9560Match-

Node

intelwireless-ac_9461Range<20.20.2.2

AND

intelwireless-ac_9461Match-

Node

intelwireless-ac_9462Range<20.20.2.2

AND

intelwireless-ac_9462Match-

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00126.html

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.8%

JSON

Related for NVD:CVE-2018-3649

cve1 prion1 hp1 cvelist1