CVE-2021-0171 — Incorrect Authorization in Intel AMT AC 8260 Firmware

CWE-863 — Incorrect Authorization3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 81.31%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel AMT AC 8260 Firmware Intel AMT AC 8265 Firmware Intel AMT AC 9260 Firmware +20 more

Timeline

PublishedFeb 9

Latest updateFeb 11

Description

Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages23 packages

▶CVEListV5intel_proset/wireless_wi-fi_and_killer_wi-fi_in_windows_10_and_11See references

▶NVDintel/proset_wireless_7265_firmware< 22.60

▶NVDintel/killer_ac_1550_firmware< 3.0

▶NVDintel/proset_ac_3165_firmware< 22.60

▶NVDintel/proset_ac_3168_firmware< 22.60

🔴Vulnerability Details

GHSA

GHSA-vc5p-fmc6-gc9v: Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to po↗2022-02-11

▶

CVEList

CVE-2021-0171: Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to po↗2022-02-09

▶