High severity · published Jan 19, 2019
CVE-2019-6496
The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, allows remote attackers to execute arbitrary code or cause a…
8.8
CVSS
6.6%
EPSS
No
On KEV
Description
The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, allows remote attackers to execute arbitrary code or cause a denial of service (block pool overflow) via malformed Wi-Fi packets during identification of available Wi-Fi networks. Exploitation of the Wi-Fi device can lead to exploitation of the host application processor in some cases, but this depends on several factors including host OS hardening and the availability of DMA.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.6% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
8F
88w8787 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88w8797 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88w8801 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88w8897 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88w8997 Firmware · Marvell
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-6496
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-6496
Third Party Advisory
http://www.securityfocus.com/bid/106865
Exploit
https://2018.zeronights.ru/wp-content/uploads/materials/19-Researching-Marvell-Avastar-Wi-Fi.pdf
Third Party Advisory
https://embedi.org/blog/remotely-compromise-devices-by-using-bugs-in-marvell-avastar-wi-fi-from-zero-knowledge-to-zero-click-rce/
Third Party Advisory
https://www.kb.cert.org/vuls/id/730261/
Third Party Advisory
https://www.scribd.com/document/398350818/WiFi-CVE-2019-6496-Marvell-s-Statement
Third Party Advisory
https://www.synology.com/security/advisory/Synology_SA_19_07