CVE-2021-0161 : Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in mult

Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.

Published 2022-02-09 23:15:14

Updated 2022-02-15 18:33:51

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2021-0161

Intel » Amt Ac 8260 Firmware
Versions before (<) 11.8.90
cpe:2.3:o:intel:amt_ac_8260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Ac 8260 » Version: N/A
Intel » Amt Ac 8265 Firmware
Versions before (<) 11.8.90
cpe:2.3:o:intel:amt_ac_8265_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Ac 8265 » Version: N/A
Intel » Amt Ac 9260 Firmware
Versions before (<) 12.0.85
cpe:2.3:o:intel:amt_ac_9260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Ac 9260 » Version: N/A
Intel » Amt Ac 9560 Firmware
Versions before (<) 12.0.85
cpe:2.3:o:intel:amt_ac_9560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Ac 9560 » Version: N/A
Intel » Amt Wi-fi 6 Ax200 Firmware
Versions before (<) 12.0.85
cpe:2.3:o:intel:amt_wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax200 » Version: N/A
Intel » Amt Wi-fi 6 Ax200 Firmware
Versions from including (>=) 15.0.0 and before (<) 15.0.35
cpe:2.3:o:intel:amt_wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax200 » Version: N/A
Intel » Amt Wi-fi 6 Ax200 Firmware
Versions from including (>=) 14.0.0 and before (<) 14.1.60
cpe:2.3:o:intel:amt_wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax200 » Version: N/A
Intel » Amt Wi-fi 6 Ax201 Firmware
Versions from including (>=) 15.0.0 and before (<) 15.0.35
cpe:2.3:o:intel:amt_wi-fi_6_ax201_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax201 » Version: N/A
Intel » Amt Wi-fi 6 Ax201 Firmware
Versions from including (>=) 14.0.0 and before (<) 14.1.60
cpe:2.3:o:intel:amt_wi-fi_6_ax201_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax201 » Version: N/A
Intel » Amt Wi-fi 6 Ax210 Firmware
Versions before (<) 15.0.35
cpe:2.3:o:intel:amt_wi-fi_6_ax210_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Amt Wi-fi 6 Ax210 » Version: N/A
Intel » Proset Ac 3165 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_3165_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 3165 » Version: N/A
Intel » Proset Ac 3168 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_3168_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 3168 » Version: N/A
Intel » Proset Ac 8260 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_8260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 8260 » Version: N/A
Intel » Proset Ac 8265 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_8265_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 8265 » Version: N/A
Intel » Proset Ac 9260 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_9260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 9260 » Version: N/A
Intel » Proset Ac 9461 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_9461_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 9461 » Version: N/A
Intel » Proset Ac 9462 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_9462_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 9462 » Version: N/A
Intel » Proset Ac 9560 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_ac_9560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Ac 9560 » Version: N/A
Intel » Proset Wi-fi 6 Ax200 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Wi-fi 6 Ax200 » Version: N/A
Intel » Proset Wi-fi 6 Ax201 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_wi-fi_6_ax201_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Wi-fi 6 Ax201 » Version: N/A
Intel » Proset Wi-fi 6e Ax210 Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_wi-fi_6e_ax210_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Wi-fi 6e Ax210 » Version: N/A
Intel » Proset Wireless 7265 (rev D) Firmware
Versions before (<) 22.60
cpe:2.3:o:intel:proset_wireless_7265_\(rev_d\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Proset Wireless 7265 (rev D) » Version: N/A
Intel » Killer Ac 1550 Firmware
Versions before (<) 3.0
cpe:2.3:o:intel:killer_ac_1550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Ac 1550 » Version: N/A
Intel » Killer Wi-fi 6 Ax1650 Firmware
Versions before (<) 3.0
cpe:2.3:o:intel:killer_wi-fi_6_ax1650_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Wi-fi 6 Ax1650 » Version: N/A
Intel » Killer Wi-fi 6e Ax1675 Firmware
Versions before (<) 3.0
cpe:2.3:o:intel:killer_wi-fi_6e_ax1675_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Killer Wi-fi 6e Ax1675 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-0161

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-0161

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-0161

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-0161

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00539.html

INTEL-SA-00539
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-0161

Products affected by CVE-2021-0161

Exploit prediction scoring system (EPSS) score for CVE-2021-0161

CVSS scores for CVE-2021-0161

CWE ids for CVE-2021-0161

References for CVE-2021-0161