High severity · published Nov 17, 2021
CVE-2021-0151
Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A3
AC 3165 Firmware · Intel
before 22.60 · source: NVD
A3
AC 3168 Firmware · Intel
before 22.60 · source: NVD
A7
AC 7265 Firmware · Intel
before 22.60 · source: NVD
A8
AC 8260 Firmware · Intel
before 22.60 · source: NVD
A8
AC 8265 Firmware · Intel
before 22.60 · source: NVD
A9
AC 9260 Firmware · Intel
before 22.60 · source: NVD
A9
AC 9461 Firmware · Intel
before 22.60 · source: NVD
A9
AC 9462 Firmware · Intel
before 22.60 · source: NVD
A9
AC 9560 Firmware · Intel
before 22.60 · source: NVD
AF
Ac1550 Firmware · Intel
All versions, or not specified · source: NVD
AF
Ax1650 Firmware · Intel
All versions, or not specified · source: NVD
AF
Ax1675 Firmware · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-0151
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-0151
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00540.html
More from AC 3165 Firmware
8.8
CVE-2021-0071
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent…
8.1
CVE-2021-33113
Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to…
8.1
CVE-2021-0078
Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of…
7.8
CVE-2021-0082
Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via…
7.8
CVE-2021-0065
Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable…