CVE-2018-3649

DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.

Score

CVSS 3.0 7.8 High

Status

Modified - secure@intel.com

Published

2018-05-10

Last modified

2024-09-16

Weaknesses

CWE-427

Affected products

• Dual Band Wireless-ac 3160 (Intel)
• Dual Band Wireless-ac 3165 (Intel)
• Dual Band Wireless-ac 3168 (Intel)
• Dual Band Wireless-ac 7260 (Intel)
• Dual Band Wireless-ac 7265 (Intel)
• Dual Band Wireless-ac 8260 (Intel)
• Dual Band Wireless-ac 8265 (Intel)
• Dual Band Wireless-n 7260 (Intel)
• Dual Band Wireless-n 7265 (Intel)
• Tri-band Wireless-ac 17265 (Intel)
• Tri-band Wireless-ac 18260 (Intel)
• Tri-band Wireless-ac 18265 (Intel)
• Wireless-ac 9260 (Intel)
• Wireless-ac 9461 (Intel)
• Wireless-ac 9462 (Intel)
• Wireless-ac 9560 (Intel)
• Wireless-n 7260 (Intel)
• Wireless-n 7265 (Intel)
• Dual Band Wireless-ac (Intel Corporation)
• Tri-band Wireless-ac And Wireless-ac Family Of Products (Intel Corporation)

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00126.html