CVE-2021-33113
Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.69%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
- CVSS 3.1
- 8.1 HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- EPSS
- 0.69% probability · 51th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- intel/ac 3165 firmware · intel/ac 3168 firmware · intel/ac 7265 firmware · intel/ac 8260 firmware · intel/ac 8265 firmware · intel/ac 9260 firmware · intel/ac 9461 firmware · intel/ac 9462 firmware · intel/ac 9560 firmware · intel/ax200 firmware · intel/ax201 firmware · intel/ax210 firmware · intel/ac 1550 firmware · intel/ax1650 firmware · intel/ax1675 firmware
- Source
- secure@intel.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.