CVE-2023-25951

Published: Feb 14, 2024Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (2)

Products: Intel: Killer, Proset/wireless

Intel

2 products

Killer

Proset/wireless

Configuration A

2 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Intel Killer	Before 3.1423.712
Intel Proset/wireless	Before 22.240

Running on/with	Platform Versions
Intel Killer Wi Fi 6e Ax1675	All versions
Intel Killer Wi Fi 6e Ax1690	All versions
Intel Proset Wi Fi 6e Ax210	All versions
Intel Wi Fi 6e Ax211	All versions
Intel Wi Fi 6e Ax411	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.