CVE-2021-37409

Published: Aug 18, 2022Modified: May 5, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (13)

Products: Intel: Wireless Ac 9560 Firmware, Wireless Ac 9462 Firmware, Wireless Ac 9461 Firmware, Killer Ac 1550 Firmware, Killer Wi Fi 6 Ax1650 Firmware, Killer Wi Fi 6e Ax1690 Firmware, Killer Wi Fi 6e Ax1675 Firmware, Wireless Ac 9260 Firmware, Proset Wi Fi 6e Ax210 Firmware, Wi Fi 6e Ax211 Firmware, Wi Fi 6 Ax200 Firmware, Wi Fi 6 Ax201 Firmware, Wi Fi 6e Ax411 Firmware

Intel

13 products

Wireless Ac 9560 Firmware

Wireless Ac 9462 Firmware

Wireless Ac 9461 Firmware

Killer Ac 1550 Firmware

Killer Wi Fi 6 Ax1650 Firmware

Killer Wi Fi 6e Ax1690 Firmware

Killer Wi Fi 6e Ax1675 Firmware

Wireless Ac 9260 Firmware

Proset Wi Fi 6e Ax210 Firmware

Wi Fi 6e Ax211 Firmware

Wi Fi 6 Ax200 Firmware

Wi Fi 6 Ax201 Firmware

Wi Fi 6e Ax411 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless Ac 9560 Firmware	Before 22.120

Running on/with	Platform Versions
Intel Wireless Ac 9560	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless Ac 9462 Firmware	Before 22.120

Running on/with	Platform Versions
Intel Wireless Ac 9462	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless Ac 9461 Firmware	Before 22.120

Running on/with	Platform Versions
Intel Wireless Ac 9461	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Killer Ac 1550 Firmware	Before 3.1122.1105

Running on/with	Platform Versions
Intel Killer Ac 1550	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Killer Wi Fi 6 Ax1650 Firmware	Before 3.1122.1105

Running on/with	Platform Versions
Intel Killer Wi Fi 6 Ax1650	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Killer Wi Fi 6e Ax1690 Firmware	Before 3.1122.1105

Running on/with	Platform Versions
Intel Killer Wi Fi 6e Ax1690	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Killer Wi Fi 6e Ax1675 Firmware	Before 3.1122.1105

Running on/with	Platform Versions
Intel Killer Wi Fi 6e Ax1675	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wireless Ac 9260 Firmware	Before 22.120

Running on/with	Platform Versions
Intel Wireless Ac 9260	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Proset Wi Fi 6e Ax210 Firmware	Before 22.120

Running on/with	Platform Versions
Intel Proset Wi Fi 6e Ax210	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wi Fi 6e Ax211 Firmware	Before 22.120

Running on/with	Platform Versions
Intel Wi Fi 6e Ax211	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wi Fi 6 Ax200 Firmware	Before 22.120

Running on/with	Platform Versions
Intel Wi Fi 6 Ax200	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wi Fi 6 Ax201 Firmware	Before 22.120

Running on/with	Platform Versions
Intel Wi Fi 6 Ax201	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Wi Fi 6e Ax411 Firmware	Before 22.120

Running on/with	Platform Versions
Intel Wi Fi 6e Ax411	All versions

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (4)

https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html

Source: secure@intel.com

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html

Source: secure@intel.com

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.