CVE-2018-3649

Published: May 10, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.

Affected (18)

Products: Intel: Dual Band Wireless Ac 3160, Dual Band Wireless N 7260, Wireless N 7260, Dual Band Wireless Ac 7260, Dual Band Wireless Ac 3165, Dual Band Wireless Ac 7265, Dual Band Wireless N 7265, Wireless N 7265, Dual Band Wireless Ac 3168, Tri Band Wireless Ac 17265, Dual Band Wireless Ac 8260, Tri Band Wireless Ac 18260, Dual Band Wireless Ac 8265, Tri Band Wireless Ac 18265, Wireless Ac 9260, Wireless Ac 9560, Wireless Ac 9461, Wireless Ac 9462

Intel

18 products

Dual Band Wireless Ac 3160

Dual Band Wireless N 7260

Wireless N 7260

Dual Band Wireless Ac 7260

Dual Band Wireless Ac 3165

Dual Band Wireless Ac 7265

Dual Band Wireless N 7265

Wireless N 7265

Dual Band Wireless Ac 3168

Tri Band Wireless Ac 17265

Dual Band Wireless Ac 8260

Tri Band Wireless Ac 18260

Dual Band Wireless Ac 8265

Tri Band Wireless Ac 18265

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Dual Band Wireless Ac 3160	Before 20.20.2.2

Running on/with	Platform Versions
Intel Dual Band Wireless Ac 3160	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Dual Band Wireless N 7260	Before 20.20.2.2

Running on/with	Platform Versions
Intel Dual Band Wireless N 7260	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless N 7260	Before 20.20.2.2

Running on/with	Platform Versions
Intel Wireless N 7260	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Dual Band Wireless Ac 7260	Before 20.20.2.2

Running on/with	Platform Versions
Intel Dual Band Wireless Ac 7260	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Dual Band Wireless Ac 3165	Before 20.20.2.2

Running on/with	Platform Versions
Intel Dual Band Wireless Ac 3165	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Dual Band Wireless Ac 7265	Before 20.20.2.2

Running on/with	Platform Versions
Intel Dual Band Wireless Ac 7265	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Dual Band Wireless N 7265	Before 20.20.2.2

Running on/with	Platform Versions
Intel Dual Band Wireless N 7265	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless N 7265	Before 20.20.2.2

Running on/with	Platform Versions
Intel Wireless N 7265	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Dual Band Wireless Ac 3168	Before 20.20.2.2

Running on/with	Platform Versions
Intel Dual Band Wireless Ac 3168	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Tri Band Wireless Ac 17265	Before 20.20.2.2

Running on/with	Platform Versions
Intel Tri Band Wireless Ac 17265	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Dual Band Wireless Ac 8260	Before 20.20.2.2

Running on/with	Platform Versions
Intel Dual Band Wireless Ac 8260	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Tri Band Wireless Ac 18260	Before 20.20.2.2

Running on/with	Platform Versions
Intel Tri Band Wireless Ac 18260	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Dual Band Wireless Ac 8265	Before 20.20.2.2

Running on/with	Platform Versions
Intel Dual Band Wireless Ac 8265	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Tri Band Wireless Ac 18265	Before 20.20.2.2

Running on/with	Platform Versions
Intel Tri Band Wireless Ac 18265	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless Ac 9260	Before 20.20.2.2

Running on/with	Platform Versions
Intel Wireless Ac 9260	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless Ac 9560	Before 20.20.2.2

Running on/with	Platform Versions
Intel Wireless Ac 9560	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless Ac 9461	Before 20.20.2.2

Running on/with	Platform Versions
Intel Wireless Ac 9461	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless Ac 9462	Before 20.20.2.2

Running on/with	Platform Versions
Intel Wireless Ac 9462	All versions

Related CWEs

CWE-427

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00126.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00126.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.