CVE-2023-28374

2024-02-1414:15:47

CWE-20

intel

web.nvd.nist.gov

cve-2023-28374

input validation

intel

proset

wireless

killer

wi-fi

denial of service

adjacent access

nvd

CVSS3

6.1

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper input validation for some Intel® PROSet/Wireless and Intel® Killer™ Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software",
    "versions": [
      {
        "version": "before version 22.240",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]