Vulnerability Description
On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, leading to remote code execution via a crafted access point that sends a long R0KH-ID field in a Fast BSS Transition Information Element (FT-IE).
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Hardmac Wi-Fi Soc Firmware | 6.37.34.40 |
| Broadcom | Hardmac Wi-Fi Soc | - |
Related Weaknesses (CWE)
References
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1059Third Party Advisory
- https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-Third Party Advisory
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1059Third Party Advisory
- https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-Third Party Advisory
FAQ
What is CVE-2017-6956?
CVE-2017-6956 is a vulnerability with a CVSS score of 8.8 (HIGH). On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, leading to remote code execution via a crafted access point t...
How severe is CVE-2017-6956?
CVE-2017-6956 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-6956?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Hardmac Wi-Fi Soc Firmware, Broadcom Hardmac Wi-Fi Soc.