CVE-2021-23188

EUVD-2021-10296
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated user to potentially enable information disclosure via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA-ADPADP
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
Affected Products (NVD)
VendorProductVersion
intelwireless-ac_9560_firmware
𝑥
< 22.120
inteldual_band_wireless-ac_3165_firmware
𝑥
< 22.120
inteldual_band_wireless-ac_3168_firmware
𝑥
< 22.120
intelwireless-ac_9462_firmware
𝑥
< 22.120
intelwireless-ac_9461_firmware
𝑥
< 22.120
intelkiller_ac_1550_firmware
𝑥
< 3.1122.1105
intelkiller_wi-fi_6_ax1650_firmware
𝑥
< 3.1122.1105
inteldual_band_wireless-ac_8260_firmware
𝑥
< 22.120
inteldual_band_wireless-ac_8265_firmware
𝑥
< 22.120
intelkiller_wi-fi_6e_ax1690_firmware
𝑥
< 3.1122.1105
intelkiller_wi-fi_6e_ax1675_firmware
𝑥
< 3.1122.1105
intelwireless-ac_9260_firmware
𝑥
< 22.120
intelproset_wi-fi_6e_ax210_firmware
𝑥
< 22.120
intelwi-fi_6e_ax211_firmware
𝑥
< 22.120
intelwi-fi_6_ax200_firmware
𝑥
< 22.120
intelwi-fi_6_ax201_firmware
𝑥
< 22.120
intelwi-fi_6e_ax411_firmware
𝑥
< 22.120
intelwireless_7265_\(rev_d\)_firmware
𝑥
< 22.120
𝑥
= Vulnerable software versions
References
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html