CVE-2018-3649: Intel Dual Band Wireless-Ac 3160

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.

Affected products

  • Intel Dual Band Wireless-Ac 3160: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Dual Band Wireless-Ac 3165: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Dual Band Wireless-Ac 3168: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Dual Band Wireless-Ac 7260: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Dual Band Wireless-Ac 7265: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Dual Band Wireless-Ac 8260: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Dual Band Wireless-Ac 8265: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Dual Band Wireless-N 7260: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Dual Band Wireless-N 7265: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Tri-Band Wireless-Ac 17265: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Tri-Band Wireless-Ac 18260: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Tri-Band Wireless-Ac 18265: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Wireless-Ac 9260: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Wireless-Ac 9461: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Wireless-Ac 9462: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Wireless-Ac 9560: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Wireless-N 7260: before 20.20.2.2 (fixed in 20.20.2.2)
  • Intel Wireless-N 7265: before 20.20.2.2 (fixed in 20.20.2.2)

Published 2018-05-10. Last modified 2026-06-17.