CVE-2021-0151

CWE-863 — Incorrect Authorization3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 82.08%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel AC 3165 Firmware Intel AC 3168 Firmware Intel AC 7265 Firmware +9 more

Timeline

PublishedNov 17

Latest updateMay 24

Description

Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages13 packages

▶CVEListV5intel(r)_wireless_bluetooth(r)_and_killer(tm)_bluetooth(r)_products_in_windows_10See references

▶NVDintel/ax200_firmware< 22.60

▶NVDintel/ax201_firmware< 22.60

▶NVDintel/ax210_firmware< 22.60

▶NVDintel/ac_3165_firmware< 22.60

🔴Vulnerability Details

GHSA

GHSA-3q9f-2cp9-wp8v: Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authe↗2022-05-24

▶

CVEList

CVE-2021-0151: Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authe↗2021-11-17

▶