Intel 7265 Firmware vulnerabilities

11 known vulnerabilities affecting intel/7265_firmware.

Total CVEs

11

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH5MEDIUM6

Vulnerabilities

Page 1 of 1

CVE-2021-0065HIGHCVSS 7.8fixed in 22.402021-11-17

CVE-2021-0065 [HIGH] CWE-276 CVE-2021-0065: Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2021-0082HIGHCVSS 7.8fixed in 22.402021-11-17

CVE-2021-0082 [HIGH] CWE-427 CVE-2021-0082: Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may a Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2021-0064HIGHCVSS 7.8fixed in 22.402021-11-17

CVE-2021-0064 [HIGH] CWE-732 CVE-2021-0064: Insecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 1 Insecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2021-0078HIGHCVSS 8.1fixed in 22.402021-11-17

CVE-2021-0078 [HIGH] CWE-20 CVE-2021-0078: Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.

CVE-2021-0071HIGHCVSS 8.8fixed in 22.402021-11-17

CVE-2021-0071 [HIGH] CWE-20 CVE-2021-0071: Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an un Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVE-2021-0069MEDIUMCVSS 6.5fixed in 22.402021-11-17

CVE-2021-0069 [MEDIUM] CWE-20 CVE-2021-0069: Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating s Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVE-2021-0063MEDIUMCVSS 6.5fixed in 22.402021-11-17

CVE-2021-0063 [MEDIUM] CWE-20 CVE-2021-0063: Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVE-2021-0053MEDIUMCVSS 5.7fixed in 22.402021-11-17

CVE-2021-0053 [MEDIUM] CWE-665 CVE-2021-0053: Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Wi Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an authenticated user to potentially enable information disclosure via adjacent access.

CVE-2021-0079MEDIUMCVSS 6.5fixed in 22.402021-11-17

CVE-2021-0079 [MEDIUM] CWE-20 CVE-2021-0079: Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVE-2021-0075MEDIUMCVSS 5.5fixed in 22.402021-11-17

CVE-2021-0075 [MEDIUM] CWE-787 CVE-2021-0075: Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow a privileged user to potentially enable denial of service via local access.

CVE-2020-0569MEDIUMCVSS 5.7fixed in 21.702020-11-23

CVE-2020-0569 [MEDIUM] CWE-787 CVE-2020-0569: Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticat Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.