CVE-2017-11120

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer…

published September 27, 2017

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

⚠️ A crafty malformed Wi-Fi frame could send your Broadcom chip into a spin! 🎢 Think of your Wi-Fi chip as a busy restaurant kitchen. If a chef receives a poorly written order, it could lead to a chaotic situation, with dishes being prepared incorrectly or even dropped altogether. An attacker could leverage this vulnerability to trigger an internal buffer overflow, causing unpredictable behavior in your Wi-Fi firmware. This could lead to service interruptions or even crashes—imagine your wireless connection disappearing in the middle of an important video call!

Put simply

Think of your Wi-Fi chip as a busy restaurant kitchen. If a chef receives a poorly written order, it could lead to a chaotic situation, with dishes being prepared incorrectly or even dropped altogether. This issue arises in Broadcom BCM4355C0 Wi-Fi chips, where a malformed RRM neighbor report frame can exploit a buffer overflow in the firmware, allowing for potential disruptions.

What to do

An attacker could leverage this vulnerability to trigger an internal buffer overflow, causing unpredictable behavior in your Wi-Fi firmware. This could lead to service interruptions or even crashes—imagine your wireless connection disappearing in the middle of an important video call! Since there's no known exploitation yet, stay vigilant! Monitor for any firmware updates from Broadcom and consider applying best security practices, like network segmentation to limit exposure. Regularly check for announcements regarding vulnerable firmware versions. This is manageable! Keep your systems updated and you’ll stay one step ahead. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09129 · 95.3th percentile
Published
2017-09-27T17:00Z
EPSS history
Timeline
  • 27 SEP 17:00Z
    On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer…
    cvelistv5