Read the docs
TI-2018-02670 Aliases CVE-2018-3649GHSA-4rfh-j7cc-fch4

Uncontrolled search path in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and…

Priority LOW 35CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-427.

Summary

DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.

Why it matters now

EPSS 0.00542 45th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
IntelDual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of productsMultiple versions (refer to public security advisory)—No fix listedCNA
  • Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products VendorIntel Affected Multiple versions (refer to public security advisory) Fixed in — No fix listed CNA

CPE configurations NVD · 36

CPEVersionsRoleVendor
cpe:2.3:o:intel:dual_band_wireless-ac_3160:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_3160:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_7260:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_7260:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-n_7260:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-n_7260:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless-n_7260:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:wireless-n_7260:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_7265:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_7265:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
  • cpe:2.3:o:intel:dual_band_wireless-ac_3160:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_3160:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_7260:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_7260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-n_7260:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-n_7260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless-n_7260:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-n_7260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_7265:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_7265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Show 26 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:intel:dual_band_wireless-n_7265:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-n_7265:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless-n_7265:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:wireless-n_7265:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_3165:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_3168:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:tri-band_wireless-ac_17265:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:tri-band_wireless-ac_17265:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_8260:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:tri-band_wireless-ac_18260:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:tri-band_wireless-ac_18260:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_8265:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:tri-band_wireless-ac_18265:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:tri-band_wireless-ac_18265:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless-ac_9260:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless-ac_9560:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless-ac_9461:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless-ac_9462:*:*:*:*:*:*:*:*before 20.20.2.2VulnerableIntel
cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
  • cpe:2.3:o:intel:dual_band_wireless-n_7265:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-n_7265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless-n_7265:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-n_7265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_3165:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_3168:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:tri-band_wireless-ac_17265:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:tri-band_wireless-ac_17265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_8260:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:tri-band_wireless-ac_18260:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:tri-band_wireless-ac_18260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_8265:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:tri-band_wireless-ac_18265:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:tri-band_wireless-ac_18265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless-ac_9260:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless-ac_9560:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless-ac_9461:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless-ac_9462:*:*:*:*:*:*:*:* Versions before 20.20.2.2 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-3649
  2. 2026-10-03 Alias added: GHSA-4rfh-j7cc-fch4

References

Advisory 1

  • TI-2017-03712 Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC… CVSS 3.1HIGH 7.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences