What is the CVSS score of CVE-2018-3649?

CVE-2018-3649 has a CVSS 3.0 base score of 7.8 (High). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.6%.

Dual Band Wireless Ac 3160 CVE-2018-3649

HIGH

Uncontrolled Search Path Element (CWE-427)

2018-05-10 secure@intel.com

Intel Privilege Escalation RCE Dual Band Wireless Ac 3160 Dual Band Wireless Ac 7260 Dual Band Wireless N 7260 Wireless N 7260 Dual Band Wireless Ac 7265 Dual Band Wireless N 7265 Wireless N 7265 Dual Band Wireless Ac 3165 Dual Band Wireless Ac 3168 Tri Band Wireless Ac 17265 Dual Band Wireless Ac 8260 Tri Band Wireless Ac 18260 Dual Band Wireless Ac 8265 Tri Band Wireless Ac 18265 Wireless Ac 9260 Wireless Ac 9560 Wireless Ac 9461 Wireless Ac 9462

7.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

May 10, 2018 - 22:29 nvd

HIGH 7.8

DescriptionNVD

DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.

AnalysisAI

DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-427. DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution. Affected products include: Intel Dual Band Wireless-Ac 3160, Intel Dual Band Wireless-Ac 7260, Intel Dual Band Wireless-N 7260, Intel Wireless-N 7260, Intel Dual Band Wireless-Ac 7265.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.