VulnerabilityModified
CVE-2020-12322
Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
MEDIUM 6.5EPSS 0.46%
Does this matter?
Lower severity and a low EPSS score (0.46%). Track it; it rarely justifies an emergency change on its own.
Description
Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.46% probability · 39th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- intel/dual band wireless-ac 3168 firmware · intel/dual band wireless-ac 8260 firmware · intel/dual band wireless-ac 8265 firmware · intel/wi-fi 6 ax200 firmware · intel/wi-fi 6 ax201 firmware · intel/wireless-ac 9260 firmware · intel/wireless-ac 9461 firmware · intel/wireless-ac 9462 firmware · intel/wireless-ac 9560 firmware · intel/wireless 7265 \(rev d\) firmware · intel/dual band wireless-ac 3165 firmware
- Source
- secure@intel.com
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.