Medium severity · published Feb 9, 2022
CVE-2021-33114
Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an authenticated user to…
5.7
CVSS
0.5%
EPSS
No
On KEV
Description
Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A1
AC 1550 Firmware · Intel
before 3.1021.733.0 · source: NVD
A3
AC 3165 Firmware · Intel
before 22.80 · source: NVD
A3
AC 3168 Firmware · Intel
before 22.80 · source: NVD
A7
AC 7265 Firmware · Intel
before 22.80 · source: NVD
A8
AC 8260 Firmware · Intel
before 22.80 · source: NVD
A8
AC 8265 Firmware · Intel
before 22.80 · source: NVD
A9
AC 9260 Firmware · Intel
before 22.80 · source: NVD
A9
AC 9461 Firmware · Intel
before 22.80 · source: NVD
A9
AC 9462 Firmware · Intel
before 22.80 · source: NVD
A9
AC 9560 Firmware · Intel
before 22.80 · source: NVD
AF
Ax1650 Firmware · Intel
before 3.1021.733.0 · source: NVD
AF
Ax1675 Firmware · Intel
before 3.1021.733.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-33114
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-33114
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00582.html
More from AC 1550 Firmware
8.1
CVE-2021-33113
Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to…
6.5
CVE-2021-33110
Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before version 22.80 may allow an…
5.7
CVE-2021-33155
Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to…
5.7
CVE-2021-33139
Improper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to…
4.2
CVE-2020-26558
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing…