CVE-2012-2619

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 13%

from disclosure to weapon1 days

Published on NVDNov 14

1st PoC+1d

exploitation probability

13%top 4% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service (out-of-bounds read and Wi-Fi outage) via an RSN 802.11i information element.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/22739unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html http://support.apple.com/kb/HT5642 http://support.apple.com/kb/HT5643 http://www.coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329 http://www.kb.cert.org/vuls/id/160027