CVE-2017-11120

EPSS 9.1%

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/144328/Broadcom-802.11k-Neighbor-Report-Response-Out-Of-Bounds-Write.htmlunverified cve_referencewww.exploit-db.com/exploits/42784/unverified exploitdbwww.exploit-db.com/exploits/42784unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/144328/Broadcom-802.11k-Neighbor-Report-Response-Out-Of-Bounds-Write.html https://bugs.chromium.org/p/project-zero/issues/detail?id=1289 https://lists.apple.com/archives/security-announce/2017/Sep/msg00007.html https://lists.apple.com/archives/security-announce/2017/Sep/msg00009.html https://source.android.com/security/bulletin/2017-09-01 https://support.apple.com/en-us/HT208112 https://support.apple.com/en-us/HT208113 https://support.apple.com/HT208112 https://support.apple.com/HT208113 https://www.exploit-db.com/exploits/42784/http://www.securityfocus.com/bid/100984