CVE-2018-3624 - Vulnerability Details - OpenCVE

Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network.

No CVSS v4.0

No CVSS v3.1

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Adjacent Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:A/AC:M/Au:N/C:P/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Intel	2g Modem Firmware Sofia 3g Sofia 3g-r Sofia 3g-r W Xmm71xx Xmm72xx Xmm73xx Xmm74xx

Configuration 1 [-]

AND

cpe:2.3:o:intel:2g_modem_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:intel:sofia_3g:-:::::::*
	cpe:2.3:h:intel:sofia_3g-r:-:::::::*
	cpe:2.3:h:intel:sofia_3g-r_w:-:::::::*
	cpe:2.3:h:intel:xmm71xx:-:::::::*
	cpe:2.3:h:intel:xmm72xx:-:::::::*
	cpe:2.3:h:intel:xmm73xx:-:::::::*
	cpe:2.3:h:intel:xmm74xx:-:::::::*

No data.

References

Link	Providers
http://www.securityfocus.com/bid/103968
https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr

History

No history.

MITRE

Status: PUBLISHED

Assigner: intel

Published: 2018-04-05T16:00:00Z

Updated: 2024-09-16T18:13:27.067Z

Reserved: 2017-12-28T00:00:00

Link: CVE-2018-3624

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-04-05T16:29:00.393

Modified: 2024-11-21T04:05:47.407

Link: CVE-2018-3624

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Intel XMM71xx, Intel XMM72xx, Intel XMM73xx, Intel XMM74xx, Sofia 3G, Sofia 3G-R, and Sofia 3G-RW", "vendor": "Intel Corporation", "versions": [{"status": "affected", "version": "All"}]}], "datePublic": "2018-04-04T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network."}], "problemTypes": [{"descriptions": [{"description": "Escalation of Privilege", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-04-30T14:57:01", "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02"}, {"name": "103968", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/103968"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@intel.com", "DATE_PUBLIC": "2018-04-04T00:00:00", "ID": "CVE-2018-3624", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intel XMM71xx, Intel XMM72xx, Intel XMM73xx, Intel XMM74xx, Sofia 3G, Sofia 3G-R, and Sofia 3G-RW", "version": {"version_data": [{"version_value": "All"}]}}]}, "vendor_name": "Intel Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Escalation of Privilege"}]}]}, "references": {"reference_data": [{"name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02", "refsource": "MISC", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02"}, {"name": "103968", "refsource": "BID", "url": "http://www.securityfocus.com/bid/103968"}, {"name": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr", "refsource": "CONFIRM", "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T04:50:30.418Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02"}, {"name": "103968", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/103968"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr"}]}]}, "cveMetadata": {"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "assignerShortName": "intel", "cveId": "CVE-2018-3624", "datePublished": "2018-04-05T16:00:00Z", "dateReserved": "2017-12-28T00:00:00", "dateUpdated": "2024-09-16T18:13:27.067Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:2g_modem_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "066AC9C9-A535-41B3-B1D8-A032B378B6C5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:sofia_3g:-:*:*:*:*:*:*:*", "matchCriteriaId": "0E5D7652-5616-4CE2-9F2A-12A290ECB2AA", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:sofia_3g-r:-:*:*:*:*:*:*:*", "matchCriteriaId": "00A7C203-FCEE-4A04-B0EF-56B17FACF97B", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:sofia_3g-r_w:-:*:*:*:*:*:*:*", "matchCriteriaId": "4CBED0FB-8114-421F-BD1A-5CEB9BB8C3A7", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:xmm71xx:-:*:*:*:*:*:*:*", "matchCriteriaId": "1F3E5FCF-8D35-460F-B5DE-20B2B5F84436", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:xmm72xx:-:*:*:*:*:*:*:*", "matchCriteriaId": "5404667A-6C3D-45B0-B8FD-F19384216E63", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:xmm73xx:-:*:*:*:*:*:*:*", "matchCriteriaId": "30BC780E-C105-43CA-A5AD-E529B9624BE7", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:xmm74xx:-:*:*:*:*:*:*:*", "matchCriteriaId": "2621B46F-8A61-4A5F-961F-6EB225F49FB1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en el m\u00f3dulo de procesamiento ETWS en Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx y Sofia 3G/R permite que atacantes remotos ejecuten c\u00f3digo arbitrario mediante una red adyacente."}], "id": "CVE-2018-3624", "lastModified": "2024-11-21T04:05:47.407", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 5.5, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-04-05T16:29:00.393", "references": [{"source": "secure@intel.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/103968"}, {"source": "secure@intel.com", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02"}, {"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/103968"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}