CVE-2021-0065

Published: Nov 17, 2021Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (13)

Products: Intel: Ax210 Firmware, Ax201 Firmware, Ax200 Firmware, Ac 9560 Firmware, Ac 9462 Firmware, Ac 9461 Firmware, 9260 Firmware, Ac 9260 Firmware, Ac 8265 Firmware, Ac 8260 Firmware, Ac 3168 Firmware, 7265 Firmware, Ac 3165 Firmware

13 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax210 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ax210	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax201 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ax201	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ax200 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ax200	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9560 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ac 9560	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9462 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ac 9462	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 9461 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ac 9461	All versions

Configuration G

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel 9260 Firmware	All versions
Intel Ac 9260 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ac 9260	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 8265 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ac 8265	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 8260 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ac 8260	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 3168 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ac 3168	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel 7265 Firmware	Before 22.40

Running on/with	Platform Versions
Intel 7265	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ac 3165 Firmware	Before 22.40

Running on/with	Platform Versions
Intel Ac 3165	All versions

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.