CVE-2017-9633

An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti 2014-2016 QX60 Hybrid, Infiniti 2014-2015 QX50, Infiniti 2014-2015 QX50 Hybrid, Infiniti 2013 M37/M56, Infiniti 2014-2016 Q70, Infiniti 2014-2016 Q70L, Infiniti 2015-2016 Q70 Hybrid, Infiniti 2013 QX56, Infiniti 2014-2016 QX 80, and Nissan 2011-2015 Leaf. A vulnerability in the temporary mobile subscriber identity (TMSI) may allow an attacker to access and control memory. This may allow remote code execution on the baseband radio processor of the TCU.

• CWE-119
• CWE-119

• http://www.securityfocus.com/bid/100132Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/100132Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-01Third Party Advisory, US Government Resource

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9627An Uncontrolled Resource Consumption issue was discovered in…8.6
• CVE-2017-9628An Information Exposure issue was discovered in Saia Burgess…
• CVE-2017-9629A Stack-Based Buffer Overflow issue was discovered in Schnei…9.8
• CVE-2017-9630An Improper Authentication issue was discovered in PDQ Manuf…
• CVE-2017-9631A Null Pointer Dereference issue was discovered in Schneider…7.5
• CVE-2017-9632A Missing Encryption of Sensitive Data issue was discovered …
• CVE-2017-9634Mitsubishi E-Designer, Version 7.52 Build 344 contains two c…
• CVE-2017-9635Schneider Electric Ampla MES 6.4 provides capability to conf…
• CVE-2017-9636Mitsubishi E-Designer, Version 7.52 Build 344 contains five …
• CVE-2017-9637Schneider Electric Ampla MES 6.4 provides capability to inte…
• CVE-2017-9638Mitsubishi E-Designer, Version 7.52 Build 344 contains six c…
• CVE-2017-9639An issue was discovered in Fuji Electric V-Server Version 3.…