Medium severity · published Aug 13, 2020
CVE-2019-14620
Insufficient control flow management for some Intel(R) Wireless Bluetooth(R) products may allow an unprivileged user to potentially enable denial of service via adjacent access
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
Insufficient control flow management for some Intel(R) Wireless Bluetooth(R) products may allow an unprivileged user to potentially enable denial of service via adjacent access.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A3
AC 3165 Firmware · Intel
All versions, or not specified · source: NVD
A3
AC 3168 Firmware · Intel
All versions, or not specified · source: NVD
A7
AC 7265 Firmware · Intel
All versions, or not specified · source: NVD
A8
AC 8260 Firmware · Intel
All versions, or not specified · source: NVD
A8
AC 8265 Firmware · Intel
All versions, or not specified · source: NVD
A9
AC 9260 Firmware · Intel
All versions, or not specified · source: NVD
A9
AC 9461 Firmware · Intel
All versions, or not specified · source: NVD
A9
AC 9462 Firmware · Intel
All versions, or not specified · source: NVD
A9
AC 9560 Firmware · Intel
All versions, or not specified · source: NVD
AF
Ax200 Firmware · Intel
All versions, or not specified · source: NVD
AF
Ax201 Firmware · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-14620
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-14620
Patch
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00337.html
More from AC 3165 Firmware
8.8
CVE-2021-0071
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent…
8.1
CVE-2021-33113
Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to…
8.1
CVE-2021-0078
Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of…
7.8
CVE-2021-0151
Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially…
7.8
CVE-2021-0082
Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via…