CVE-2021-0066 : Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in mult

Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access.

Published 2022-02-09 23:15:11

Updated 2022-02-14 19:33:11

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2021-0066

Intel » Amt Ac 8260 Firmware
Versions before (<) 11.8.90
cpe:2.3:o:intel:amt_ac_8260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Ac 8260 » Version: N/A
Intel » Amt Ac 8265 Firmware
Versions before (<) 11.8.90
cpe:2.3:o:intel:amt_ac_8265_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Ac 8265 » Version: N/A
Intel » Amt Ac 9260 Firmware
Versions before (<) 12.0.85
cpe:2.3:o:intel:amt_ac_9260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Ac 9260 » Version: N/A
Intel » Amt Ac 9560 Firmware
Versions before (<) 12.0.85
cpe:2.3:o:intel:amt_ac_9560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Ac 9560 » Version: N/A
Intel » Amt Wi-fi 6 Ax200 Firmware
Versions before (<) 12.0.85
cpe:2.3:o:intel:amt_wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax200 » Version: N/A
Intel » Amt Wi-fi 6 Ax200 Firmware
Versions from including (>=) 15.0.0 and before (<) 15.0.35
cpe:2.3:o:intel:amt_wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax200 » Version: N/A
Intel » Amt Wi-fi 6 Ax200 Firmware
Versions from including (>=) 14.0.0 and before (<) 14.1.60
cpe:2.3:o:intel:amt_wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax200 » Version: N/A
Intel » Amt Wi-fi 6 Ax201 Firmware
Versions from including (>=) 15.0.0 and before (<) 15.0.35
cpe:2.3:o:intel:amt_wi-fi_6_ax201_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax201 » Version: N/A
Intel » Amt Wi-fi 6 Ax201 Firmware
Versions from including (>=) 14.0.0 and before (<) 14.1.60
cpe:2.3:o:intel:amt_wi-fi_6_ax201_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax201 » Version: N/A
Intel » Amt Wi-fi 6 Ax210 Firmware
Versions before (<) 15.0.35
cpe:2.3:o:intel:amt_wi-fi_6_ax210_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax210 » Version: N/A
Intel » Proset Ac 3165 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_3165_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 3165 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Ac 3168 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_3168_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 3168 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Ac 8260 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_8260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 8260 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Ac 8265 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_8265_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 8265 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Ac 9260 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_9260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 9260 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Ac 9461 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_9461_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 9461 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Ac 9462 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_9462_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 9462 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Ac 9560 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_9560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 9560 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Wi-fi 6 Ax200 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Wi-fi 6 Ax200 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Wi-fi 6 Ax201 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_wi-fi_6_ax201_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Wi-fi 6 Ax201 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Wi-fi 6e Ax210 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_wi-fi_6e_ax210_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Wi-fi 6e Ax210 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Proset Wireless 7265 (rev D) Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_wireless_7265_\(rev_d\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Wireless 7265 (rev D) » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Killer Ac 1550 Firmware
Versions before (<) 3.0
cpe:2.3:o:intel:killer_ac_1550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Ac 1550 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Killer Wi-fi 6 Ax1650 Firmware
Versions before (<) 3.0
cpe:2.3:o:intel:killer_wi-fi_6_ax1650_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Wi-fi 6 Ax1650 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Intel » Killer Wi-fi 6e Ax1675 Firmware
Versions before (<) 3.0
cpe:2.3:o:intel:killer_wi-fi_6e_ax1675_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Wi-fi 6e Ax1675 » Version: N/A
When used together with: Microsoft » Windows » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-0066

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 32 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-0066

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.5	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-0066

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-0066

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00539.html

INTEL-SA-00539
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-0066

Products affected by CVE-2021-0066

Exploit prediction scoring system (EPSS) score for CVE-2021-0066

CVSS scores for CVE-2021-0066

CWE ids for CVE-2021-0066

References for CVE-2021-0066