CVE-2020-12322
published 2020-11-12CVE-2020-12322: Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial…
PriorityP422medium6.5CVSS 3.1
AVAACLPRNUINSUCNINAH
EPSS
0.46%
39.7th percentile
Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | dual_band_wireless-ac_3165_firmware | < 21.110 | 21.110 |
| intel | dual_band_wireless-ac_3168_firmware | < 21.110 | 21.110 |
| intel | dual_band_wireless-ac_8260_firmware | < 21.110 | 21.110 |
| intel | dual_band_wireless-ac_8265_firmware | < 21.110 | 21.110 |
| intel | wi-fi_6_ax200_firmware | < 21.110 | 21.110 |
| intel | wi-fi_6_ax201_firmware | < 21.110 | 21.110 |
| intel | wireless-ac_9260_firmware | < 21.110 | 21.110 |
| intel | wireless-ac_9461_firmware | < 21.110 | 21.110 |
| intel | wireless-ac_9462_firmware | < 21.110 | 21.110 |
| intel | wireless-ac_9560_firmware | < 21.110 | 21.110 |
| intel | wireless_7265_firmware | < 21.110 | 21.110 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.03.3LOWAV:A/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Intel Wireless Bluetooth 17/18.1/18.1.1607.3129 denial of service (intel-sa-00403)
vuldb·2026-10-13·CVSS 6.5
CVE-2020-12322 [MEDIUM] Intel Wireless Bluetooth 17/18.1/18.1.1607.3129 denial of service (intel-sa-00403)
A vulnerability was found in Intel Wireless Bluetooth 17/18.1/18.1.1607.3129. It has been classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to denial of service.
This vulnerability is listed as CVE-2020-12322. The attack must be carried out from within the local network. There is no available exploit.
Upgrading the affected component is recommended.
GHSA
GHSA-j7f7-4w2r-52cg: Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21
ghsa_unreviewed·2022-05-24
CVE-2020-12322 [MEDIUM] CWE-20 GHSA-j7f7-4w2r-52cg: Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21
Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-11-12
Published