Improper Input Validation Vulnerability in Intel Wireless Firmware
CVE-2021-0172

6.5MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Proset/wireless Wi-fi In Multiple Operating Systems And Some Killer(tm) Wi-fi In Windows 10 And 11
Vendor
CVE Published:
9 February 2022

What is CVE-2021-0172?

The vulnerability stems from improper input validation in the firmware of various Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi products across multiple operating systems. This flaw has the potential to allow an unauthenticated user to execute denial of service attacks via adjacent access in environments running Windows 10 and 11, potentially disrupting the availability of the wireless network.

Affected Version(s)

Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 See references

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2021-0172 : Improper Input Validation Vulnerability in Intel Wireless Firmware