Improper Access Control Vulnerability in Intel Wireless and Killer Bluetooth Products
CVE-2021-0151

7.8HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Wireless Bluetooth(r) And Killer(tm) Bluetooth(r) Products In Windows 10
Vendor
CVE Published:
17 November 2021

What is CVE-2021-0151?

In certain Intel Wireless Bluetooth and Killer Bluetooth products for Windows 10, a flaw in the installer allows an authenticated user to exploit improper access control. This vulnerability could enable an attacker with local access to gain elevated privileges on the system. Users are encouraged to update their devices to the latest versions to mitigate the potential risks. For further details, refer to Intel's advisory.

Affected Version(s)

Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 See references

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.