CVE-2023-25951

CWE-20 — Improper Input ValidationCWE-184CWE-22 — Path TraversalCWE-235 documents5 sources
Severity
6.7MEDIUM
EPSS
0.1%
top 79.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Intel KillerIntel Proset\/wirelessIntel(r) Proset Wireless AND Intel(r) Killer(tm) Wi-fi Software
Timeline
PublishedFeb 14
Latest updateFeb 10

Description

Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:NExploitability: 0.8 | Impact: 5.2

Affected Packages3 packages

▶NVDintel/killer< 3.1423.712

🔴Vulnerability Details

4
GHSA
FUXA Affected by a Path Traversal Sanitization Bypass↗2026-02-10
▶
GHSA
GHSA-w9vp-f95x-pq8m: Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22↗2024-10-29
▶
OSV
CVE-2023-25951: Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22↗2024-02-14
▶
CVEList
CVE-2023-25951: Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22↗2024-02-14
▶
CVE-2023-25951 (MEDIUM CVSS 6.7) | Improper input validation for some | cvebase.io