CVE-2019-13581
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A heap-based buffer overflow allows remote attackers to cause a denial of service or execute arbitrary code via malformed Wi-Fi packets.
Se descubrió un problema en el firmware de Marvell 88W8688 Wi-Fi versiones anteriores a p52, como es usado en los vehículos Tesla Model S/X fabricados antes de marzo de 2018, por medio del módulo Parrot Faurecia Automotive FC6050W. Un desbordamiento de búfer en la región heap de la memoria permite a atacantes remotos causar una denegación de servicio o ejecutar código arbitrario por medio de paquetes de Wi-Fi malformados.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-07-13 CVE Reserved
- 2019-11-15 CVE Published
- 2023-12-25 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-model-s | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.marvell.com/documents/ioaj5dntk2ubykssa78s | 2020-01-02 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Marvell Search vendor "Marvell" | 88w8688 Firmware Search vendor "Marvell" for product "88w8688 Firmware" | < p52 Search vendor "Marvell" for product "88w8688 Firmware" and version " < p52" | - |
Affected
| in | Marvell Search vendor "Marvell" | 88w8688 Search vendor "Marvell" for product "88w8688" | - | - |
Safe
|