Medium severity · published Nov 12, 2020
CVE-2020-12322
Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via…
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IW
Intel(R) Wireless Bluetooth(R) ·
before version 21.110 · source: vendor
DB
Dual Band Wireless-ac 3165 Firmware · Intel
before 21.110 · source: NVD
DB
Dual Band Wireless-ac 3168 Firmware · Intel
before 21.110 · source: NVD
DB
Dual Band Wireless-ac 8260 Firmware · Intel
before 21.110 · source: NVD
DB
Dual Band Wireless-ac 8265 Firmware · Intel
before 21.110 · source: NVD
W6
Wi-fi 6 Ax200 Firmware · Intel
before 21.110 · source: NVD
W6
Wi-fi 6 Ax201 Firmware · Intel
before 21.110 · source: NVD
W7
Wireless 7265 (rev D) Firmware · Intel
before 21.110 · source: NVD
W9
Wireless-ac 9260 Firmware · Intel
before 21.110 · source: NVD
W9
Wireless-ac 9461 Firmware · Intel
before 21.110 · source: NVD
W9
Wireless-ac 9462 Firmware · Intel
before 21.110 · source: NVD
W9
Wireless-ac 9560 Firmware · Intel
before 21.110 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12322
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12322
Patch
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403
More from Intel(R) Wireless Bluetooth(R)
8.8
CVE-2020-12321
Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege…