CVE-2021-0152 — Improper Verification of Cryptographic Signature in Intel AC 3165 Firmware

CWE-347 — Improper Verification of Cryptographic Signature3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 93.69%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel AC 3165 Firmware Intel AC 3168 Firmware Intel AC 7265 Firmware +9 more

Timeline

PublishedNov 17

Latest updateMay 24

Description

Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages12 packages

▶NVDintel/ax200_firmware< 22.60

▶NVDintel/ax201_firmware< 22.60

▶NVDintel/ax210_firmware< 22.60

▶NVDintel/ac_3165_firmware< 22.60

▶NVDintel/ac_3168_firmware< 22.60

🔴Vulnerability Details

GHSA

GHSA-mw2h-m2p8-8vm7: Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Wind↗2022-05-24

▶

CVEList

CVE-2021-0152: Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Wind↗2021-11-17

▶