{"affected":[{"affectedData":[{"product":"Intel XMM71xx, Intel XMM72xx, Intel XMM73xx, Intel XMM74xx, Sofia 3G, Sofia 3G-R, and Sofia 3G-RW","vendor":"Intel Corporation","versions":[{"status":"affected","version":"All"}]}],"source":"secure@intel.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:intel:2g_modem_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"066AC9C9-A535-41B3-B1D8-A032B378B6C5","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:intel:sofia_3g:-:*:*:*:*:*:*:*","matchCriteriaId":"0E5D7652-5616-4CE2-9F2A-12A290ECB2AA","vulnerable":false},{"criteria":"cpe:2.3:h:intel:sofia_3g-r:-:*:*:*:*:*:*:*","matchCriteriaId":"00A7C203-FCEE-4A04-B0EF-56B17FACF97B","vulnerable":false},{"criteria":"cpe:2.3:h:intel:sofia_3g-r_w:-:*:*:*:*:*:*:*","matchCriteriaId":"4CBED0FB-8114-421F-BD1A-5CEB9BB8C3A7","vulnerable":false},{"criteria":"cpe:2.3:h:intel:xmm71xx:-:*:*:*:*:*:*:*","matchCriteriaId":"1F3E5FCF-8D35-460F-B5DE-20B2B5F84436","vulnerable":false},{"criteria":"cpe:2.3:h:intel:xmm72xx:-:*:*:*:*:*:*:*","matchCriteriaId":"5404667A-6C3D-45B0-B8FD-F19384216E63","vulnerable":false},{"criteria":"cpe:2.3:h:intel:xmm73xx:-:*:*:*:*:*:*:*","matchCriteriaId":"30BC780E-C105-43CA-A5AD-E529B9624BE7","vulnerable":false},{"criteria":"cpe:2.3:h:intel:xmm74xx:-:*:*:*:*:*:*:*","matchCriteriaId":"2621B46F-8A61-4A5F-961F-6EB225F49FB1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network."},{"lang":"es","value":"Desbordamiento de búfer en el módulo de procesamiento ETWS en Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx y Sofia 3G/R permite que atacantes remotos ejecuten código arbitrario mediante una red adyacente."}],"id":"CVE-2018-3624","lastModified":"2026-06-17T01:57:34.653","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"ADJACENT_NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":5.4,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:A/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":5.5,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.6,"impactScore":6.0,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-04-05T16:29:00.393","references":[{"source":"secure@intel.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/103968"},{"source":"secure@intel.com","tags":["Third Party Advisory","US Government Resource"],"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02"},{"source":"secure@intel.com","tags":["Vendor Advisory"],"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/103968"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-114-02"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00116&languageid=en-fr"}],"sourceIdentifier":"secure@intel.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-119"}],"source":"nvd@nist.gov","type":"Primary"}]}