VulnerabilityModified
CVE-2021-26257
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.
MEDIUM 5.5EPSS 0.19%
Does this matter?
Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.
Description
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.19% probability · 9th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- intel/wi-fi 6 ax411 firmware · intel/wi-fi 6 ax211 firmware · intel/wi-fi 6 ax210 firmware · intel/wi-fi 6 ax201 firmware · intel/wi-fi 6 ax200 firmware · intel/wireless-ac 9560 firmware · intel/wireless-ac 9462 firmware · intel/wireless-ac 9461 firmware · intel/wireless-ac 9260 firmware · intel/dual band wireless-ac 8265 firmware · intel/dual band wireless-ac 8260 firmware · intel/dual band wireless-ac 3168 firmware · intel/wireless 7265 firmware · intel/dual band wireless-ac 3165 firmware · intel/killer wi-fi 6e ax1690 firmware · intel/killer wi-fi 6e ax1675 firmware · intel/killer wi-fi 6 ax1650 firmware · intel/killer wireless-ac 1550 firmware
- Source
- secure@intel.com
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.