CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 2CVE-2017-11122
https://notcve.org/view.php?id=CVE-2017-11122
02 Oct 2017 — On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to ICMPv6 router advertisement offloading. En chips Wi-Fi de Broadcom con modelo BCM4355C0 y firmware 9.44.78.27.0.1.56, un atacante puede provocar una fuga de información por una validación de longitudes insuficiente. Esto está relacionado con la descarga de anuncios de router ICMPv6. • http://packetstormsecurity.com/files/144461/Broadcom-ICMPv6-Information-Leak.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 2CVE-2017-11121
https://notcve.org/view.php?id=CVE-2017-11121
26 Sep 2017 — On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack overflows, leading to denial of service or other effects, aka B-V2017061205. En los chips Wi-Fi Broadcom BCM4355C0 9.44.78.27.0.1.56 y otros chips, se podrían desencadenar desbordamientos internos de la memoria dinámica (heap) del firmware Wi-Fi si se utilizan frames en modo Fast Transition con intinerancia Over-... • http://packetstormsecurity.com/files/144329/Broadcom-802.11r-FT-Reassociation-Response-Overflows.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 1%CPEs: 4EXPL: 3CVE-2017-11120 – Apple iOS 10.2 - Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response
https://notcve.org/view.php?id=CVE-2017-11120
26 Sep 2017 — On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204. En los chips Wi-Fi Broadcom BCM4355C0 versión 9.44.78.27.0.1.56 y otros chips, un atacante puede crear un frame del RRM Neighbor Report Frame Handler malformadopara desencadenar un desbordamiento interno de búfer en el firmware Wi-Fi, también conocido como B-V2017061204. Broadcom suffers from an out-o... • https://www.exploit-db.com/exploits/42784 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •