CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2021-37409
High (7.8) in intel. EPSS 0.2% chance of exploitation in the next 30 days.
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
- CWE
- CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:killer_ac_1550_firmware
- intel:killer_wi-fi_6_ax1650_firmware
- intel:killer_wi-fi_6e_ax1675_firmware
- intel:killer_wi-fi_6e_ax1690_firmware
- intel:proset_wi-fi_6e_ax210_firmware
- intel:wi-fi_6_ax200_firmware
- intel:wi-fi_6_ax201_firmware
- intel:wi-fi_6e_ax211_firmware
- intel:wi-fi_6e_ax411_firmware
- intel:wireless-ac_9260_firmware
- intel:wireless-ac_9461_firmware
- intel:wireless-ac_9462_firmware
- intel:wireless-ac_9560_firmware
References
- https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
- https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html