CVE-2020-12322

CWE-20 — Improper Input Validation3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 74.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Intel Dual Band Wireless-ac 3165 FirmwareIntel Dual Band Wireless-ac 3168 FirmwareIntel Dual Band Wireless-ac 8260 Firmware+8 more
Timeline
PublishedNov 12
Latest updateMay 24

Description

Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages12 packages

▶CVEListV5intel(r)_wireless_bluetooth(r)before version 21.110

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j7f7-4w2r-52cg: Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21↗2022-05-24
▶
CVEList
CVE-2020-12322: Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21↗2020-11-12
▶