Lucene search

K
cveIntelCVE-2021-0164
HistoryFeb 09, 2022 - 11:15 p.m.

CVE-2021-0164

2022-02-0923:15:14
intel
web.nvd.nist.gov
85
cve-2021-0164
intel
killer
wi-fi
firmware
access control
privilege escalation
nvd
windows 10
windows 11
operating systems

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0

Percentile

12.6%

Improper access control in firmware for Intel® PROSet/Wireless Wi-Fi in multiple operating systems and Killer™ Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Node
intelamt_ac_8260_firmwareRange<11.8.90
AND
intelamt_ac_8260Match-
Node
intelamt_ac_8265_firmwareRange<11.8.90
AND
intelamt_ac_8265Match-
Node
intelamt_ac_9260_firmwareRange<12.0.85
AND
intelamt_ac_9260Match-
Node
intelamt_ac_9560_firmwareRange<12.0.85
AND
intelamt_ac_9560Match-
Node
intelamt_wi-fi_6_ax200_firmwareRange<12.0.85
OR
intelamt_wi-fi_6_ax200_firmwareRange14.0.014.1.60
OR
intelamt_wi-fi_6_ax200_firmwareRange15.0.015.0.35
AND
intelamt_wi-fi_6_ax200Match-
Node
intelamt_wi-fi_6_ax201_firmwareRange14.0.014.1.60
OR
intelamt_wi-fi_6_ax201_firmwareRange15.0.015.0.35
AND
intelamt_wi-fi_6_ax201Match-
Node
intelamt_wi-fi_6_ax210_firmwareRange<15.0.35
AND
intelamt_wi-fi_6_ax210Match-
Node
intelproset_ac_3165_firmwareRange<22.60
AND
intelproset_ac_3165Match-
Node
intelproset_ac_3168_firmwareRange<22.60
AND
intelproset_ac_3168Match-
Node
intelproset_ac_8260_firmwareRange<22.60
AND
intelproset_ac_8260Match-
Node
intelproset_ac_8265Match-
AND
intelproset_ac_8265_firmwareRange<22.60
Node
intelproset_ac_9260Match-
AND
intelproset_ac_9260_firmwareRange<22.60
Node
intelproset_ac_9461Match-
AND
intelproset_ac_9461_firmwareRange<22.60
Node
intelproset_ac_9462Match-
AND
intelproset_ac_9462_firmwareRange<22.60
Node
intelproset_ac_9560Match-
AND
intelproset_ac_9560_firmwareRange<22.60
Node
intelproset_wi-fi_6_ax200Match-
AND
intelproset_wi-fi_6_ax200_firmwareRange<22.60
Node
intelproset_wi-fi_6_ax201Match-
AND
intelproset_wi-fi_6_ax201_firmwareRange<22.60
Node
intelproset_wi-fi_6e_ax210Match-
AND
intelproset_wi-fi_6e_ax210_firmwareRange<22.60
Node
intelproset_wireless_7265_\(rev_d\)_firmwareRange<22.60
AND
intelproset_wireless_7265_\(rev_d\)Match-
Node
intelkiller_ac_1550_firmwareRange<3.0
AND
intelkiller_ac_1550Match-
Node
intelkiller_wi-fi_6_ax1650_firmwareRange<3.0
AND
intelkiller_wi-fi_6_ax1650Match-
Node
intelkiller_wi-fi_6e_ax1675_firmwareRange<3.0
AND
intelkiller_wi-fi_6e_ax1675Match-
VendorProductVersionCPE
intelamt_ac_8260_firmware*cpe:2.3:o:intel:amt_ac_8260_firmware:*:*:*:*:*:*:*:*
intelamt_ac_8260-cpe:2.3:h:intel:amt_ac_8260:-:*:*:*:*:*:*:*
intelamt_ac_8265_firmware*cpe:2.3:o:intel:amt_ac_8265_firmware:*:*:*:*:*:*:*:*
intelamt_ac_8265-cpe:2.3:h:intel:amt_ac_8265:-:*:*:*:*:*:*:*
intelamt_ac_9260_firmware*cpe:2.3:o:intel:amt_ac_9260_firmware:*:*:*:*:*:*:*:*
intelamt_ac_9260-cpe:2.3:h:intel:amt_ac_9260:-:*:*:*:*:*:*:*
intelamt_ac_9560_firmware*cpe:2.3:o:intel:amt_ac_9560_firmware:*:*:*:*:*:*:*:*
intelamt_ac_9560-cpe:2.3:h:intel:amt_ac_9560:-:*:*:*:*:*:*:*
intelamt_wi-fi_6_ax200_firmware*cpe:2.3:o:intel:amt_wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
intelamt_wi-fi_6_ax200-cpe:2.3:h:intel:amt_wi-fi_6_ax200:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 441

CNA Affected

[
  {
    "product": "Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0

Percentile

12.6%