Intel Wi-Fi 6E Ax211 Firmware vulnerabilities

CVE-2022-28667 [MEDIUM] CWE-787 CVE-2022-28667: Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVE-2022-21160 [HIGH] CWE-119 CVE-2022-21160: Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenti Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access.

CVE-2021-23223 [HIGH] CWE-665 CVE-2021-23223: Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allo Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2022-21197 [HIGH] CWE-20 CVE-2022-21197: Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticat Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access.

CVE-2021-37409 [HIGH] CWE-863 CVE-2021-37409: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allo Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2022-21139 [HIGH] CWE-326 CVE-2022-21139: Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthen Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVE-2022-21240 [MEDIUM] CWE-125 CVE-2022-21240: Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to po Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access.

CVE-2022-21140 [MEDIUM] CVE-2022-21140: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allo Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable information disclosure via local access.

CVE-2022-21172 [MEDIUM] CWE-787 CVE-2022-21172: Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to p Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2021-23168 [MEDIUM] CWE-125 CVE-2021-23168: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVE-2021-26254 [MEDIUM] CWE-125 CVE-2021-26254: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a p Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of service via local access.

CVE-2022-21212 [MEDIUM] CWE-20 CVE-2022-21212: Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticat Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVE-2021-44545 [MEDIUM] CWE-20 CVE-2021-44545: Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may al Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVE-2021-23188 [LOW] CVE-2021-23188: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allo Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated user to potentially enable information disclosure via local access.