ByteOS Network

NVD Vulnerability Details :

CVE-2018-3624

Analyzed

Source-secure@intel.com

Published At-05 Apr, 2018 | 16:29

Updated At-10 May, 2018 | 14:13

Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.3	HIGH	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary	2.0	5.4	MEDIUM	AV:A/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 8.3

Base severity: HIGH

Vector:

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 5.4

Base severity: MEDIUM

Vector:

AV:A/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/103968	secure@intel.com	Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02	secure@intel.com	Third Party Advisory US Government Resource
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr	secure@intel.com	Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/103968

Source: secure@intel.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02

Source: secure@intel.com

Resource:

Third Party Advisory

US Government Resource

Hyperlink: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr

Source: secure@intel.com

Resource:

Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History