CVE-2021-33110
published 2022-02-09CVE-2021-33110: Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may…
PriorityP423medium6.5CVSS 3.1
AVAACLPRNUINSUCNINAH
EPSS
0.50%
39.8th percentile
Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | ac_1550_firmware | < 22.80 | 22.80 |
| intel | ac_3165_firmware | < 22.80 | 22.80 |
| intel | ac_3168_firmware | < 22.80 | 22.80 |
| intel | ac_7265_firmware | < 22.80 | 22.80 |
| intel | ac_8260_firmware | < 22.80 | 22.80 |
| intel | ac_8265_firmware | < 22.80 | 22.80 |
| intel | ac_9260_firmware | < 22.80 | 22.80 |
| intel | ac_9461_firmware | < 22.80 | 22.80 |
| intel | ac_9462_firmware | < 22.80 | 22.80 |
| intel | ac_9560_firmware | < 22.80 | 22.80 |
| intel | ax1650_firmware | < 22.80 | 22.80 |
| intel | ax1675_firmware | < 22.80 | 22.80 |
| intel | ax200_firmware | < 22.80 | 22.80 |
| intel | ax201_firmware | < 22.80 | 22.80 |
| intel | ax210_firmware | < 22.80 | 22.80 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.03.3LOWAV:A/AC:L/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c3fq-5967-8fmf: Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22
ghsa_unreviewed·2022-02-11
CVE-2021-33110 [MEDIUM] CWE-20 GHSA-c3fq-5967-8fmf: Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22
Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
OSV
CVE-2021-33110: Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22
osv·2022-02-09·CVSS 6.5
CVE-2021-33110 [MEDIUM] CVE-2021-33110: Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22
Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-02-09
Published