Medium severity · published Aug 18, 2022
CVE-2021-26950
Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially…
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DB
Dual Band Wireless-ac 3165 Firmware · Intel
before 22.120 · source: NVD
DB
Dual Band Wireless-ac 3168 Firmware · Intel
before 22.120 · source: NVD
DB
Dual Band Wireless-ac 8260 Firmware · Intel
before 22.120 · source: NVD
DB
Dual Band Wireless-ac 8265 Firmware · Intel
before 22.120 · source: NVD
KW
Killer Wi-fi 6 Ax1650 Firmware · Intel
before 22.120 · source: NVD
KW
Killer Wi-fi 6e Ax1675 Firmware · Intel
before 22.120 · source: NVD
KW
Killer Wi-fi 6e Ax1690 Firmware · Intel
before 22.120 · source: NVD
KW
Killer Wireless-ac 1550 Firmware · Intel
before 22.120 · source: NVD
W6
Wi-fi 6 Ax200 Firmware · Intel
before 22.120 · source: NVD
W6
Wi-fi 6 Ax201 Firmware · Intel
before 22.120 · source: NVD
W6
Wi-fi 6 Ax210 Firmware · Intel
before 22.120 · source: NVD
W6
Wi-fi 6 Ax211 Firmware · Intel
before 22.120 · source: NVD
Affected product
DB
Dual Band Wireless-ac 3165 Firmware
Intel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-26950
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-26950
Patch
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html
More from Dual Band Wireless-ac 3165 Firmware
8.8
CVE-2020-12321
Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege…
8.8
CVE-2019-11152
Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of service, and…
7.8
CVE-2021-33847
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to…
7.8
CVE-2019-11151
Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of service, and…
7.1
CVE-2021-23179
Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user to potentially enable…