CVE-2018-3649
DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.
- CVSS 3.0
- 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.54% probability · 45th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-427
- Affected
- intel/dual band wireless-ac 3160 · intel/dual band wireless-ac 7260 · intel/dual band wireless-n 7260 · intel/wireless-n 7260 · intel/dual band wireless-ac 7265 · intel/dual band wireless-n 7265 · intel/wireless-n 7265 · intel/dual band wireless-ac 3165 · intel/dual band wireless-ac 3168 · intel/tri-band wireless-ac 17265 · intel/dual band wireless-ac 8260 · intel/tri-band wireless-ac 18260 · intel/dual band wireless-ac 8265 · intel/tri-band wireless-ac 18265 · intel/wireless-ac 9260 · intel/wireless-ac 9560 · intel/wireless-ac 9461 · intel/wireless-ac 9462
- Source
- secure@intel.com
EPSS 0.5% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.