CVE-2021-44545
published 2022-08-18CVE-2021-44545: Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of…
PriorityP423medium6.5CVSS 3.1
AVAACLPRNUINSUCNINAH
EPSS
0.46%
37.1th percentile
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firmware-nonfree | < firmware-nonfree 20220913-1 (bookworm) | firmware-nonfree 20220913-1 (bookworm) |
| intel | killer_ac_1550_firmware | < 3.1122.1105 | 3.1122.1105 |
| intel | killer_wi-fi_6_ax1650_firmware | < 3.1122.1105 | 3.1122.1105 |
| intel | killer_wi-fi_6e_ax1675_firmware | < 3.1122.1105 | 3.1122.1105 |
| intel | killer_wi-fi_6e_ax1690_firmware | < 3.1122.1105 | 3.1122.1105 |
| intel | proset_wi-fi_6e_ax210_firmware | < 22.120 | 22.120 |
| intel | wi-fi_6_ax200_firmware | < 22.120 | 22.120 |
| intel | wi-fi_6_ax201_firmware | < 22.120 | 22.120 |
| intel | wi-fi_6e_ax211_firmware | < 22.120 | 22.120 |
| intel | wi-fi_6e_ax411_firmware | < 22.120 | 22.120 |
| intel_proset | wireless_wifi_and_killer_wifi_products | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-938j-25px-7rch: Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable
ghsa_unreviewed·2022-08-19
CVE-2021-44545 [MEDIUM] CWE-20 GHSA-938j-25px-7rch: Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
OSV
CVE-2021-44545: Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable
osv·2022-08-18·CVSS 6.5
CVE-2021-44545 [MEDIUM] CVE-2021-44545: Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Debian
CVE-2021-44545: firmware-nonfree - Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) ...
vendor_debian·2021·CVSS 6.5
CVE-2021-44545 [MEDIUM] CVE-2021-44545: firmware-nonfree - Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) ...
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Scope: local
bookworm: resolved (fixed in 20220913-1)
bullseye: open
forky: resolved (fixed in 20220913-1)
sid: resolved (fixed in 20220913-1)
trixie: resolved (fixed in 20220913-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://lists.debian.org/debian-lts-announce/2023/04/msg00002.htmlhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.htmlhttps://lists.debian.org/debian-lts-announce/2023/04/msg00002.htmlhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
2022-08-18
Published