CVE-2021-33155

CWE-20 — Improper Input Validation4 documents4 sources

Severity

5.7MEDIUM

EPSS

0.1%

top 71.96%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Ac3168 Firmware Intel AC 1550 Firmware Intel AC 3165 Firmware +13 more

Timeline

PublishedFeb 9

Latest updateFeb 11

Description

Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.1 | Impact: 3.6

Affected Packages17 packages

▶CVEListV5intel(r)_wireless_bluetooth(r)_and_killer(tm)_bluetooth(r)_productsbefore version 22.100

▶NVDintel/ax200_firmware< 22.100

▶NVDintel/ax201_firmware< 22.100

▶NVDintel/ax210_firmware< 22.100

▶NVDintel/ax211_firmware< 22.100

🔴Vulnerability Details

GHSA

GHSA-c4v5-f23r-548x: Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22↗2022-02-11

▶

OSV

CVE-2021-33155: Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22↗2022-02-09

▶

CVEList

CVE-2021-33155: Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22↗2022-02-09

▶