CVE-2008-1197

Published Sep 5, 2008

Last updated 6 years ago

Overview

Description: The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via a "Null SSID."
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.3
Impact score: 6.9
Exploitability score: 6.8
Vector string: AV:N/AC:M/Au:S/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:marvell:88w8361w-bem1:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B62CD8FD-EEBE-484F-BE0F-6075C93E657E"
          },
          {
            "criteria": "cpe:2.3:h:netgear:wn802t:1.3.16:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E1B46C9B-BC8C-4291-87E2-7FA39A287866"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References