Improper Input Validation Vulnerability in Intel PROSet/Wireless Wi-Fi Products
CVE-2021-0072

5.5MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Proset/wireless Wi-fi In Multiple Operating Systems And Some Killer(tm) Wi-fi In Windows 10 And 11
Vendor
CVE Published:
9 February 2022

What is CVE-2021-0072?

An improper input validation vulnerability exists in the firmware for Intel® PROSet/Wireless Wi-Fi and Killer™ Wi-Fi products. This issue may allow a privileged user to potentially exploit local access to enable information disclosure, posing a security risk in environments where such products are utilized. This vulnerability affects multiple operating systems including Windows 10 and 11.

Affected Version(s)

Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 See references

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2021-0072 : Improper Input Validation Vulnerability in Intel PROSet/Wireless Wi-Fi Products