A potential security vulnerability in Intel® PROSet/Wireless WiFi Software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability.
CVEID: CVE-2019-0136
Description: Insufficient access control in the Intel® PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.****
CVSS Base Score: 4.7 Medium
CVSS Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Intel® PROSet/Wireless WiFi Software releases before version 21.10 for Microsoft Windows* 7, 8.1 and 10:
-Intel® Dual Band Wireless-AC 3160****
-Intel® Dual Band Wireless-AC 7260****
-Intel® Dual Band Wireless-N 7260****
-Intel® Wireless-N 7260****
-Intel® Dual Band Wireless-AC 7260 for Desktop****
-Intel® Dual Band Wireless-AC 7265 (Rev. C)****
-Intel® Dual Band Wireless-N 7265 (Rev. C)****
-Intel® Wireless-N 7265 (Rev. C)****
-Intel® Dual Band Wireless-AC 3165****
-Intel® Dual Band Wireless-AC 7265 (Rev. D)****
-Intel® Dual Band Wireless-N 7265 (Rev. D)****
-Intel® Wireless-N 7265 (Rev. D)****
-Intel® Dual Band Wireless-AC 3168****
-Intel® Tri-Band Wireless-AC 17265****
-Intel® Dual Band Wireless-AC 8260****
-Intel® Tri-Band Wireless-AC 18260****
-Intel® Dual Band Wireless-AC 8265****
-Intel® Dual Band Wireless-AC 8265 Desktop Kit****
-Intel® Tri-Band Wireless-AC 18265****
-Intel® Wireless-AC 9560****
-Intel® Wireless-AC 9461****
-Intel® Wireless-AC 9462****
-Intel® Wireless-AC 9260****
-Intel® Wi-Fi 6 AX200****
-Intel® Wi-Fi 6 AX201
For Google Chrome OS:
An Intel® WiFi driver resolving the vulnerability will be up streamed to Chromium on June 11th, 2019.
-Intel® Dual Band Wireless-AC 7260
-Intel® Dual Band Wireless-AC 7265 (Rev.D)
-Intel® Wireless-AC 9560
For Linux OS:
An Intel® WiFi driver resolving the vulnerability will be up streamed on June 11th, 2019.
-Intel® Dual Band Wireless-AC 3160****
-Intel® Dual Band Wireless-AC 7260****
-Intel® Dual Band Wireless-N 7260****
-Intel® Wireless-N 7260****
-Intel® Dual Band Wireless-AC 7260 for Desktop****
-Intel® Dual Band Wireless-AC 7265 (Rev. C)****
-Intel® Dual Band Wireless-N 7265 (Rev. C)****
-Intel® Wireless-N 7265 (Rev. C)****
-Intel® Dual Band Wireless-AC 3165****
-Intel® Dual Band Wireless-AC 7265 (Rev. D)****
-Intel® Dual Band Wireless-N 7265 (Rev. D)****
-Intel® Wireless-N 7265 (Rev. D)****
-Intel® Dual Band Wireless-AC 3168****
-Intel® Tri-Band Wireless-AC 17265****
-Intel® Dual Band Wireless-AC 8260****
-Intel® Tri-Band Wireless-AC 18260****
-Intel® Dual Band Wireless-AC 8265****
-Intel® Dual Band Wireless-AC 8265 Desktop Kit****
-Intel® Tri-Band Wireless-AC 18265****
-Intel® Wireless-AC 9560****
-Intel® Wireless-AC 9461****
-Intel® Wireless-AC 9462****
-Intel® Wireless-AC 9260****
-Intel® Wi-Fi 6 AX200****
-Intel® Wi-Fi 6 AX201
For Microsoft Windows*:
For Google Chrome OS or Linux:
Intel would like to thank JPCERT for reporting this issue.
Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.