CVE-2017-6957

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-03-27 · updated 2026-06-17
Weakness: CWE-119

Description

Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming and the feature is enabled in RAM, allows remote attackers to execute arbitrary code via a crafted reassociation response frame with a Cisco IE (156).

Affected products

Broadcom Bcm4339 Soc Firmware: 6.37.34.40

References

http://packetstormsecurity.com/files/141803/Broadcom-Stack-Buffer-Overflow.html
http://www.securityfocus.com/bid/97054
https://bugs.chromium.org/p/project-zero/issues/detail?id=1051
http://packetstormsecurity.com/files/141803/Broadcom-Stack-Buffer-Overflow.html
http://www.securityfocus.com/bid/97054
https://bugs.chromium.org/p/project-zero/issues/detail?id=1051

Get alerted when CVE-2017-6957 or the next vulnerability affects your stack