« Volver al listado

CVE-2012-2619

Estado: ModificadaAlta (7.8)—💥 Exploit

Los chips Wi-Fi Broadcom BCM4325 y BCM4329, tal y como se utiliza en ciertos productos Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung y Sony, permiten a atacantes remotos provocar una denegación de servicio (lectura fuera de limites y corte de Wi-Fi) a través de un elemento de información 802.11i RSN.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Tecnologías afectadas (3)

Apple — Iphone OSBroadcom — Bcm4325Broadcom — Bcm4329

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-2619",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-11-14T12:30:58.740",
  "references": [
    {
      "url": "http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.apple.com/kb/HT5642",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.apple.com/kb/HT5643",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/160027",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.apple.com/kb/HT5642",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.apple.com/kb/HT5643",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/160027",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service (out-of-bounds read and Wi-Fi outage) via an RSN 802.11i information element."
    },
    {
      "lang": "es",
      "value": "Los chips Wi-Fi Broadcom BCM4325 y BCM4329, tal y como se utiliza en ciertos productos Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung y Sony, permiten a atacantes remotos provocar una denegación de servicio (lectura fuera de limites y corte de Wi-Fi) a través de un elemento de información 802.11i RSN.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:41:46.007",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:broadcom:bcm4325:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA4163F3-10B5-40E7-9561-84C33356181A"
            },
            {
              "criteria": "cpe:2.3:h:broadcom:bcm4329:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5172ED34-F2F8-4803-A3D8-AF827262CE35"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FD52712-0484-421B-A5DD-2CF0B4C027BD",
              "versionEndIncluding": "6.0.2"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEE0068D-C699-4646-9658-610409925A79"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87C215DD-BC98-4283-BF13-69556EF7CB78"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}