Lucene search

[email protected]NVD:CVE-2021-0071

HistoryNov 17, 2021 - 8:15 p.m.

CVE-2021-0071

2021-11-1720:15:08

CWE-20

[email protected]

web.nvd.nist.gov

intel

firmware

privilege escalation

input validation

uefi

adjacent access

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

30.5%

JSON

Improper input validation in firmware for some Intel® PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Affected configurations

Nvd

Node

intelax210_firmwareRange<22.40

AND

intelax210Match-

Node

intelax201_firmwareRange<22.40

AND

intelax201Match-

Node

intelax200_firmwareRange<22.40

AND

intelax200Match-

Node

intelac_9560_firmwareRange<22.40

AND

intelac_9560Match-

Node

intelac_9462_firmwareRange<22.40

AND

intelac_9462Match-

Node

intelac_9461_firmwareRange<22.40

AND

intelac_9461Match-

Node

intel9260_firmwareMatch-

intelac_9260_firmwareRange<22.40

AND

intelac_9260Match-

Node

intelac_8265_firmwareRange<22.40

AND

intelac_8265Match-

Node

intelac_8260_firmwareRange<22.40

AND

intelac_8260Match-

Node

intelac_3168_firmwareRange<22.40

AND

intelac_3168Match-

Node

intel7265_firmwareRange<22.40

AND

intel7265Match-

Node

intelac_3165_firmwareRange<22.40

AND

intelac_3165Match-

VendorProductVersionCPE
intelax210_firmware*cpe:2.3:o:intel:ax210_firmware:*:*:*:*:*:*:*:*
intelax210-cpe:2.3:h:intel:ax210:-:*:*:*:*:*:*:*
intelax201_firmware*cpe:2.3:o:intel:ax201_firmware:*:*:*:*:*:*:*:*
intelax201-cpe:2.3:h:intel:ax201:-:*:*:*:*:*:*:*
intelax200_firmware*cpe:2.3:o:intel:ax200_firmware:*:*:*:*:*:*:*:*
intelax200-cpe:2.3:h:intel:ax200:-:*:*:*:*:*:*:*
intelac_9560_firmware*cpe:2.3:o:intel:ac_9560_firmware:*:*:*:*:*:*:*:*
intelac_9560-cpe:2.3:h:intel:ac_9560:-:*:*:*:*:*:*:*
intelac_9462_firmware*cpe:2.3:o:intel:ac_9462_firmware:*:*:*:*:*:*:*:*
intelac_9462-cpe:2.3:h:intel:ac_9462:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	ax210_firmware	*	cpe:2.3:o:intel:ax210_firmware::::::::
intel	ax210	-	cpe:2.3:h:intel:ax210:-:::::::*
intel	ax201_firmware	*	cpe:2.3:o:intel:ax201_firmware::::::::
intel	ax201	-	cpe:2.3:h:intel:ax201:-:::::::*
intel	ax200_firmware	*	cpe:2.3:o:intel:ax200_firmware::::::::
intel	ax200	-	cpe:2.3:h:intel:ax200:-:::::::*
intel	ac_9560_firmware	*	cpe:2.3:o:intel:ac_9560_firmware::::::::
intel	ac_9560	-	cpe:2.3:h:intel:ac_9560:-:::::::*
intel	ac_9462_firmware	*	cpe:2.3:o:intel:ac_9462_firmware::::::::
intel	ac_9462	-	cpe:2.3:h:intel:ac_9462:-:::::::*