Intel® ProSet/Wireless WiFi Driver Advisory

Summary:

A potential security vulnerability in some Intel® ProSet/Wireless WiFi drivers may allow information disclosure and denial of service. ** **Intel is releasing a software update to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2021-0105

Description: Insecure inherited permissions in some Intel® ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access.

CVSS Base Score: 3.1 Low

CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L

Affected Products:

Intel® PROSet/Wireless products:

Intel® Wi-Fi 6 AX201
Intel® Wi-Fi 6 AX200
Intel® Wireless-AC 9560
Intel® Wireless-AC 9462
Intel® Wireless-AC 9461

Recommendations:

Intel recommends updating the Intel® ProSet/Wireless WiFi drivers to version 22.0 or later.

Updates are available for download at this location:

<https://downloadcenter.intel.com/download/30208&gt;

Acknowledgements:

This issue was found internally by an Intel employee.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.