CVE-2021-0172: Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may…

PriorityP424medium6.5CVSS 3.1

AVAACLPRNUINSUCNINAH

EPSS

0.52%

40.4th percentile

Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Affected

26 ranges· showing 25

Vendor	Product	Version range	Fixed in
intel	amt_ac_8260_firmware	< 11.8.90	11.8.90
intel	amt_ac_8265_firmware	< 11.8.90	11.8.90
intel	amt_ac_9260_firmware	< 12.0.85	12.0.85
intel	amt_ac_9560_firmware	< 12.0.85	12.0.85
intel	amt_wi-fi_6_ax200_firmware	< 12.0.85	12.0.85
intel	amt_wi-fi_6_ax200_firmware	>= 14.0.0 < 14.1.60	14.1.60
intel	amt_wi-fi_6_ax200_firmware	>= 15.0.0 < 15.0.35	15.0.35
intel	amt_wi-fi_6_ax201_firmware	>= 14.0.0 < 14.1.60	14.1.60
intel	amt_wi-fi_6_ax201_firmware	>= 15.0.0 < 15.0.35	15.0.35
intel	amt_wi-fi_6_ax210_firmware	< 15.0.35	15.0.35
intel	killer_ac_1550_firmware	< 3.0	3.0
intel	killer_wi-fi_6_ax1650_firmware	< 3.0	3.0
intel	killer_wi-fi_6e_ax1675_firmware	< 3.0	3.0
intel	proset_ac_3165_firmware	< 22.60	22.60
intel	proset_ac_3168_firmware	< 22.60	22.60
intel	proset_ac_8260_firmware	< 22.60	22.60
intel	proset_ac_8265_firmware	< 22.60	22.60
intel	proset_ac_9260_firmware	< 22.60	22.60
intel	proset_ac_9461_firmware	< 22.60	22.60
intel	proset_ac_9462_firmware	< 22.60	22.60
intel	proset_ac_9560_firmware	< 22.60	22.60
intel	proset_wi-fi_6_ax200_firmware	< 22.60	22.60
intel	proset_wi-fi_6_ax201_firmware	< 22.60	22.60
intel	proset_wi-fi_6e_ax210_firmware	< 22.60	22.60
intel	proset_wireless_7265_firmware	< 22.60	22.60

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvdv2.03.3LOWAV:A/AC:L/Au:N/C:N/I:N/A:P

osv6.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.