CVE-2022-21140

published 2022-08-18

CVE-2022-21140: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable information…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable information disclosure via local access.

Affected

19 ranges

Vendor	Product	Version range	Fixed in
intel	dual_band_wireless-ac_3165_firmware	< 22.120	22.120
intel	dual_band_wireless-ac_3168_firmware	< 22.120	22.120
intel	dual_band_wireless-ac_8260_firmware	< 22.120	22.120
intel	dual_band_wireless-ac_8265_firmware	< 22.120	22.120
intel	killer_ac_1550_firmware	< 3.1122.1105	3.1122.1105
intel	killer_wi-fi_6_ax1650_firmware	< 3.1122.1105	3.1122.1105
intel	killer_wi-fi_6e_ax1675_firmware	< 3.1122.1105	3.1122.1105
intel	killer_wi-fi_6e_ax1690_firmware	< 3.1122.1105	3.1122.1105
intel	proset_wi-fi_6e_ax210_firmware	< 22.120	22.120
intel	wi-fi_6_ax200_firmware	< 22.120	22.120
intel	wi-fi_6_ax201_firmware	< 22.120	22.120
intel	wi-fi_6e_ax211_firmware	< 22.120	22.120
intel	wi-fi_6e_ax411_firmware	< 22.120	22.120
intel	wireless-ac_9260_firmware	< 22.120	22.120
intel	wireless-ac_9461_firmware	< 22.120	22.120
intel	wireless-ac_9462_firmware	< 22.120	22.120
intel	wireless-ac_9560_firmware	< 22.120	22.120
intel	wireless_7265_firmware	< 22.120	22.120
intel_proset	wireless_wifi_and_killer_wifi_products	—	—

CWE-863