CVE-2024-25563

CWE-6655 documents5 sources

Severity

4.6MEDIUM

EPSS

0.1%

top 72.97%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Killer Intel Proset\/wireless Wifi Intel(r) Proset Wireless Software AND Intel(r) Killer(tm) Wi-fi

Timeline

PublishedNov 13

Description

Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow a privileged user to potentially enable information disclosure via local access.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages4 packages

▶CVEListV5intel(r)_proset/wireless_software_and_intel(r)_killer(tm)_wi-fibefore version 23.40

▶NVDintel/proset\/wireless_wifi< 23.40.0

▶NVDintel/killer< 23.40.0

▶Debianfirmware-nonfree< 20240610-1+1

🔴Vulnerability Details

OSV

CVE-2024-25563: Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23↗2024-11-13

▶

CVEList

CVE-2024-25563: Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23↗2024-11-13

▶

GHSA

GHSA-9hqp-3p4c-742r: Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23↗2024-11-13

▶

📋Vendor Advisories

Debian

CVE-2024-25563: firmware-nonfree - Improper initialization in firmware for some Intel(R) PROSet/Wireless Software a...↗2024

▶