SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-33110

Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

MEDIUM 6.5EPSS 0.50%

Does this matter?

Lower severity and a low EPSS score (0.50%). Track it; it rarely justifies an emergency change on its own.

Description

Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVSS 3.1
6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.50% probability · 42th percentile
CISA KEV
Not listed
Weakness
CWE-20
Affected
intel/ac 1550 firmware · intel/ac 3165 firmware · intel/ac 3168 firmware · intel/ac 7265 firmware · intel/ac 8260 firmware · intel/ac 8265 firmware · intel/ac 9260 firmware · intel/ac 9461 firmware · intel/ac 9462 firmware · intel/ac 9560 firmware · intel/ax1650 firmware · intel/ax1675 firmware · intel/ax200 firmware · intel/ax201 firmware · intel/ax210 firmware
Source
secure@intel.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.