Details of VAR-201704-1630

ID

VAR-201704-1630

TITLE

Broadcom WiFi SoC Access Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2017-04005

DESCRIPTION

WiFiSoC is a Wifie NIC chip from Broadcom Corporation. The BroadcomWiFi SoC has a permission acquisition vulnerability that allows an attacker to take over a device that uses a Broadcom wireless network card under a WiFi network without interacting with the user.

Trust: 0.6

sources: CNVD: CNVD-2017-04005

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2017-04005

AFFECTED PRODUCTS

vendor:

broadcom

model:

wifi soc

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2017-04005

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2017-04005
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2017-04005
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2017-04005

EXTERNAL IDS

db:

CNVD

id:

CNVD-2017-04005

Trust: 0.6

sources: CNVD: CNVD-2017-04005

REFERENCES

url:

https://malwaretips.com/threads/wi-fi-chip-in-iphones-samsung-nexus-phones-vulnerable-to-over-the-air-hack.70294/

Trust: 0.6

sources: CNVD: CNVD-2017-04005

SOURCES

db:

CNVD

id:

CNVD-2017-04005

LAST UPDATE DATE

2022-05-04T09:51:36.143000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2017-04005

date:

2017-04-06T00:00:00

SOURCES RELEASE DATE

db:

CNVD

id:

CNVD-2017-04005

date:

2017-04-06T00:00:00