What’s Vulnerable › Vulnerabilities

CVE-2018-3649

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-05-10 · updated 2026-06-17
• Weakness: CWE-427

Description

DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.

Affected products

• Intel Dual Band Wireless-Ac 3160: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Dual Band Wireless-Ac 3165: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Dual Band Wireless-Ac 3168: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Dual Band Wireless-Ac 7260: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Dual Band Wireless-Ac 7265: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Dual Band Wireless-Ac 8260: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Dual Band Wireless-Ac 8265: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Dual Band Wireless-N 7260: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Dual Band Wireless-N 7265: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Tri-Band Wireless-Ac 17265: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Tri-Band Wireless-Ac 18260: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Tri-Band Wireless-Ac 18265: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Wireless-Ac 9260: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Wireless-Ac 9461: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Wireless-Ac 9462: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Wireless-Ac 9560: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Wireless-N 7260: before 20.20.2.2 — fixed in 20.20.2.2
• Intel Wireless-N 7265: before 20.20.2.2 — fixed in 20.20.2.2

How to fix

Upgrade to a fixed version: Intel Dual Band Wireless-Ac 3160 20.20.2.2; Intel Dual Band Wireless-Ac 3165 20.20.2.2; Intel Dual Band Wireless-Ac 3168 20.20.2.2; Intel Dual Band Wireless-Ac 7260 20.20.2.2; Intel Dual Band Wireless-Ac 7265 20.20.2.2; Intel Dual Band Wireless-Ac 8260 20.20.2.2; Intel Dual Band Wireless-Ac 8265 20.20.2.2; Intel Dual Band Wireless-N 7260 20.20.2.2; Intel Dual Band Wireless-N 7265 20.20.2.2; Intel Tri-Band Wireless-Ac 17265 20.20.2.2; Intel Tri-Band Wireless-Ac 18260 20.20.2.2; Intel Tri-Band Wireless-Ac 18265 20.20.2.2. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00126.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00126.html

Get alerted when CVE-2018-3649 or the next vulnerability affects your stack