CVE-2021-23223

published 2022-08-18

CVE-2021-23223: Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	firmware-nonfree	< firmware-nonfree 20220913-1 (bookworm)	firmware-nonfree 20220913-1 (bookworm)
intel	killer_wi-fi_6e_ax1675_firmware	< 3.1122.1105	3.1122.1105
intel	killer_wi-fi_6e_ax1690_firmware	< 3.1122.1105	3.1122.1105
intel	proset_wi-fi_6e_ax210_firmware	< 22.120	22.120
intel	wi-fi_6e_ax211_firmware	< 22.120	22.120
intel	wi-fi_6e_ax411_firmware	< 22.120	22.120
intel_proset	wireless_wifi_and_killer_wifi_products	—	—

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv 7.8 HIGH

CWE-665