Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2012-2619 — Improper Input Validation in Apple Iphone OS

CWE-20 — Improper Input Validation4 documents4 sources
Severity
7.8HIGHNVD
EPSS
26.5%
top 3.66%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Apple Iphone OSDebian Firmware-nonfree
Timeline
PublishedNov 14
Latest updateMay 17

Description

The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service (out-of-bounds read and Wi-Fi outage) via an RSN 802.11i information element.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDapple/iphone_os6.0.2+2

🔴Vulnerability Details

1
GHSA
GHSA-cw66-q853-7m23: The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung,↗2022-05-17
▶

💥Exploits & PoCs

1
Exploit-DB
Broadcom BCM4325 / BCM4329 Devices - Denial of Service↗2012-11-15
▶

📋Vendor Advisories

1
Debian
CVE-2012-2619: firmware-nonfree - The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, As...↗2012
▶