CVE-2017-9417

Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue

published June 3, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.

CVSS
โ€”
EPSS
64%
Percentile
99.2
In the wild
Unconfirmed
What it is

๐Ÿšจ Remote attackers can execute arbitrary code on devices using Broadcom BCM43xx Wi-Fi chips, making this vulnerability quite a hot topic! ๐Ÿ”ฅ Think of it like a delivery driver who can suddenly open the back door of a truck while in transit โ€” all your packages (or in this case, data) are at risk of being tampered with without anyone noticing! If exploited, an attacker could potentially gain full control over the affected device, altering its functionality or stealing sensitive information. This could lead to widespread security breaches, especially in environments relying on these Wi-Fi chips.

Put simply

Think of it like a delivery driver who can suddenly open the back door of a truck while in transit โ€” all your packages (or in this case, data) are at risk of being tampered with without anyone noticing! The Broadpwn issue allows for remote code execution on devices equipped with Broadcom BCM43xx Wi-Fi chips through unspecified vectors, leaving devices vulnerable to malicious exploitation.

What to do

If exploited, an attacker could potentially gain full control over the affected device, altering its functionality or stealing sensitive information. This could lead to widespread security breaches, especially in environments relying on these Wi-Fi chips. While no patch is available yet, monitor your devices for any unusual activity and consider disabling the Wi-Fi functionality on critical devices until a fix is released. Staying updated with vendor announcements is crucial! You've got this! Stay vigilant, and with the right precautions, you can keep your device safe from potential threats. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.63997 ยท 99.2th percentile
Published
2017-06-03T23:00Z
EPSS history
Timeline
  • 30 AUG 16:00Z
    EPSS moved 42% โ†’ 64%
    epss
  • 03 JUN 23:00Z
    Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue
    cvelistv5