VDB

CVE-2019-6496

CVE-2019-6496 PUBLISHED CVSS 8.800000190734863 HIGH

The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, allows remote attackers to execute arbitrary code or cause a denial of service (block pool overflow) via malformed Wi-Fi packets during identification of available Wi-Fi networks. Exploitation of the Wi-Fi device can lead to exploitation of the host application processor in some cases, but this depends on several factors including host OS hardening and the availability of DMA.

EPSS 3.17% · 87.2th percentile

Risk Scores

CVSS 3.0
8.800000190734863
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
3.17%
87.2th percentile

Affected Products

VendorProductVersions
marvell88w8897_firmware
marvell88w8787_firmware
n/an/an/a
marvell88w8801_firmware
marvell88w8997_firmware
marvell88w8797_firmware

Timeline

  • Jan 19, 2019 CVE Published
  • Feb 6, 2019 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›