CVE-2021-0161

CWE-20 — Improper Input Validation5 documents4 sources

Severity

6.7MEDIUM

EPSS

0.1%

top 80.54%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel AMT AC 8260 Firmware Intel AMT AC 8265 Firmware Intel AMT AC 9260 Firmware +20 more

Timeline

PublishedFeb 9

Latest updateOct 10

Description

Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages23 packages

▶CVEListV5intel(r)_proset/wireless_wi-fi_in_multiple_operating_systems_and_killer(tm)_wi-fi_in_windows_10_and_11See references

▶NVDintel/proset_wireless_7265_\(rev_d\)_firmware< 22.60

▶NVDintel/killer_ac_1550_firmware< 3.0

▶NVDintel/proset_ac_3165_firmware< 22.60

▶NVDintel/proset_ac_3168_firmware< 22.60

🔴Vulnerability Details

OSV

edk2 vulnerabilities↗2024-10-10

▶

GHSA

GHSA-qv9r-2vjx-2c6q: Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may a↗2022-02-11

▶

CVEList

CVE-2021-0161: Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may a↗2022-02-09

▶

OSV

CVE-2021-0161: Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may a↗2022-02-09

▶