New Threat: Arbitrary code execution in Wi-Fi chip

[sdog-nist]

New Threat

Threat Category: LAN&PAN

Threat: Arbitrary code execution in the context of the Wi-Fi chip.

Threat Origin:

Exploit Example:

CVE Example:

• CVE-2017-6975

Possible Countermeasures:

• To reduce the probability an attacker can realize this threat, disable Wi-Fi whenever Wi-Fi connectivity is not needed:
  • Mobile Device User

References: