製品・ソフトウェアに関する情報

JVN脆弱性詳細

複数の Intel Wireless-AC 製品におけるインジェクションに関する脆弱性

Title	複数の Intel Wireless-AC 製品におけるインジェクションに関する脆弱性
Summary	複数の Intel Wireless-AC 製品には、インジェクションに関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 2, 2018, midnight
Registration Date	July 5, 2018, 4:50 p.m.
Last Update	July 5, 2018, 4:50 p.m.

CVSS3.0 : 重要
Score	7.8
Vector	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS2.0 : 警告
Score	4.6
Vector	AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected System

インテル

Intel Dual Band Wireless-AC 3160

Intel Dual Band Wireless-AC 3165

Intel Dual Band Wireless-AC 3168

Intel Dual Band Wireless-AC 7260

Intel Dual Band Wireless-AC 7265

Intel Dual Band Wireless-AC 8260

Intel Dual Band Wireless-AC 8265

Intel Dual Band Wireless-N 7260

Intel Dual Band Wireless-N 7265

Intel Tri-Band Wireless-AC 17265

Intel Tri-Band Wireless-AC 18260

Intel Tri-Band Wireless-AC 18265

Intel Wireless-AC 9260

Intel Wireless-AC 9461

Intel Wireless-AC 9462

Intel Wireless-AC 9560

Intel Wireless-N 7260

Intel Wireless-N 7265

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2018-3649	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3649
National Vulnerability Database (NVD)
2	CVE-2018-3649	https://nvd.nist.gov/vuln/detail/CVE-2018-3649

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-74	https://cwe.mitre.org/data/definitions/74.html

ベンダー情報

No	Name	URL
Intel
1	INTEL-SA-00126	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00126.html

Change Log

No	Changed Details	Date of change
1	[2018年07月05日] 掲載	July 5, 2018, 4:50 p.m.

NVD Vulnerability Information

CVE-2018-3649

Summary	DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.
Publication Date	May 11, 2018, 7:29 a.m.
Registration Date	March 1, 2021, 7:25 p.m.
Last Update	Nov. 21, 2024, 1:05 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-ac_3160::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-ac_3160:-:::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-ac_7260::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-ac_7260:-:::::::*

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-n_7260::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-n_7260:-:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:intel:wireless-n_7260::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:wireless-n_7260:-:::::::*

Configuration5		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-ac_7260::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-ac_7260:-:::::::*

Configuration6		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-ac_7265::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-ac_7265:-:::::::*

Configuration7		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-n_7265::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-n_7265:-:::::::*

Configuration8		or higher	or less	more than	less than
cpe:2.3:o:intel:wireless-n_7265::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:wireless-n_7265:-:::::::*

Configuration9		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-ac_3165::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:::::::*

Configuration10		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-ac_7265::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-ac_7265:-:::::::*

Configuration11		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-n_7265::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-n_7265:-:::::::*

Configuration12		or higher	or less	more than	less than
cpe:2.3:o:intel:wireless-n_7265::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:wireless-n_7265:-:::::::*

Configuration13		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-ac_3168::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:::::::*

Configuration14		or higher	or less	more than	less than
cpe:2.3:o:intel:tri-band_wireless-ac_17265::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:tri-band_wireless-ac_17265:-:::::::*

Configuration15		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-ac_8260::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:::::::*

Configuration16		or higher	or less	more than	less than
cpe:2.3:o:intel:tri-band_wireless-ac_18260::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:tri-band_wireless-ac_18260:-:::::::*

Configuration17		or higher	or less	more than	less than
cpe:2.3:o:intel:dual_band_wireless-ac_8265::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:::::::*

Configuration18		or higher	or less	more than	less than
cpe:2.3:o:intel:tri-band_wireless-ac_18265::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:tri-band_wireless-ac_18265:-:::::::*

Configuration19		or higher	or less	more than	less than
cpe:2.3:o:intel:wireless-ac_9260::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:wireless-ac_9260:-:::::::*

Configuration20		or higher	or less	more than	less than
cpe:2.3:o:intel:wireless-ac_9560::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:wireless-ac_9560:-:::::::*

Configuration21		or higher	or less	more than	less than
cpe:2.3:o:intel:wireless-ac_9461::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:wireless-ac_9461:-:::::::*

Configuration22		or higher	or less	more than	less than
cpe:2.3:o:intel:wireless-ac_9462::::::::					20.20.2.2
execution environment
1	cpe:2.3:h:intel:wireless-ac_9462:-:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00126.html		Vendor Advisory
2	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00126.html		Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-427	制御されていない検索パスの要素	https://cwe.mitre.org/data/definitions/427.html