CVE-2021-0164: Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an…

PriorityP338high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.30%

22.5th percentile

Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access.

Affected

26 ranges· showing 25

Vendor	Product	Version range	Fixed in
intel	amt_ac_8260_firmware	< 11.8.90	11.8.90
intel	amt_ac_8265_firmware	< 11.8.90	11.8.90
intel	amt_ac_9260_firmware	< 12.0.85	12.0.85
intel	amt_ac_9560_firmware	< 12.0.85	12.0.85
intel	amt_wi-fi_6_ax200_firmware	< 12.0.85	12.0.85
intel	amt_wi-fi_6_ax200_firmware	>= 14.0.0 < 14.1.60	14.1.60
intel	amt_wi-fi_6_ax200_firmware	>= 15.0.0 < 15.0.35	15.0.35
intel	amt_wi-fi_6_ax201_firmware	>= 14.0.0 < 14.1.60	14.1.60
intel	amt_wi-fi_6_ax201_firmware	>= 15.0.0 < 15.0.35	15.0.35
intel	amt_wi-fi_6_ax210_firmware	< 15.0.35	15.0.35
intel	killer_ac_1550_firmware	< 3.0	3.0
intel	killer_wi-fi_6_ax1650_firmware	< 3.0	3.0
intel	killer_wi-fi_6e_ax1675_firmware	< 3.0	3.0
intel	proset_ac_3165_firmware	< 22.60	22.60
intel	proset_ac_3168_firmware	< 22.60	22.60
intel	proset_ac_8260_firmware	< 22.60	22.60
intel	proset_ac_8265_firmware	< 22.60	22.60
intel	proset_ac_9260_firmware	< 22.60	22.60
intel	proset_ac_9461_firmware	< 22.60	22.60
intel	proset_ac_9462_firmware	< 22.60	22.60
intel	proset_ac_9560_firmware	< 22.60	22.60
intel	proset_wi-fi_6_ax200_firmware	< 22.60	22.60
intel	proset_wi-fi_6_ax201_firmware	< 22.60	22.60
intel	proset_wi-fi_6e_ax210_firmware	< 22.60	22.60
intel	proset_wireless_7265_firmware	< 22.60	22.60

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

osv7.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.