Skip to content
Fencer Vulns
medium 6.6

CVE-2017-9647 json

A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produce…

published 2017-08-07 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-18578

cvss
6.6
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 45%
public exploits
0
none known

Summary

A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and Nissan 2011-2015 Leaf. An attacker with a physical connection to the TCU may exploit a buffer overflow condition that exists in the processing of AT commands. This may allow arbitrary code execution on the baseband radio processor of the TCU.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-17-208-01 updated cvss 6.8

Continental AG Infineon S-Gold 2 (PMB 8876)

  • Continental AG BMW 2009-2010 Continental AG Ford program to update 2G modems has been active since 2016 and impact is restricted to the limited numbe Continental AG Infiniti JX35 2013 Continental AG Infiniti M37/M56 2013 Continental AG Infiniti Q70 2014-2016 Continental AG Infiniti Q70 Hybrid 2015-2016
    +8 more products
    Continental AG Infiniti Q70L 2014-2016 Continental AG Infiniti QX50 2014-2015 Continental AG Infiniti QX50 Hybrid 2014-2015 Continental AG Infiniti QX56 2013 Continental AG Infiniti QX60 2014-2016 Continental AG Infiniti QX60 Hybrid 2014-2016 Continental AG Infiniti QX80 2014-2016 Continental AG Nissian Leaf 2011-2015
    affected: vendor fix, mitigation “Continental has validated the reported vulnerabilities but has not yet identified a mitigation plan.”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

0.54% chance of exploitation in the next 30 days, higher than 45% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 6.6 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • n/a Continental AG Infineon S-Gold 2 (PMB 8876)

Classification

Weakness
  • CWE-121 Stack-based Buffer Overflow
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.