VulnerabilityModified
CVE-2021-33847
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable escalation of privilege via local access.
HIGH 7.8EPSS 0.22%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.22% probability · 12th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- intel/wi-fi 6 ax411 firmware · intel/wi-fi 6 ax211 firmware · intel/wi-fi 6 ax210 firmware · intel/wi-fi 6 ax201 firmware · intel/wi-fi 6 ax200 firmware · intel/wireless-ac 9560 firmware · intel/wireless-ac 9462 firmware · intel/wireless-ac 9461 firmware · intel/wireless-ac 9260 firmware · intel/dual band wireless-ac 8265 firmware · intel/dual band wireless-ac 8260 firmware · intel/dual band wireless-ac 3168 firmware · intel/wireless 7265 firmware · intel/dual band wireless-ac 3165 firmware · intel/killer wi-fi 6e ax1690 firmware · intel/killer wi-fi 6e ax1675 firmware · intel/killer wi-fi 6 ax1650 firmware · intel/killer wireless-ac 1550 firmware
- Source
- secure@intel.com
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.