15 matches found
CVE-2020-26558
CVE-2020-26558: Bluetooth Core 2.1–5.2 Passkey entry/mitm reflection vulnerability. Nearby attacker could identify the Passkey during pairing by reflecting public key and authentication evidence, enabling completion of authenticated pairing with the correct Passkey. Astra Linux bulletin repeats t...
CVE-2020-24586
CVE-2020-24586 describes a fragmentation cache issue in the Linux kernel Wi‑Fi stack: received fragments are not cleared from memory on reconnect, enabling an attacker within Wi‑Fi range to inject arbitrary packets or exfiltrate data when fragments encrypted with WEP/CCMP/GCMP are involved. Conne...
CVE-2020-26555
Technical details beyond the initial description are not publicly provided in the connected documents. CVE-2020-26555 relates to Bluetooth BR/EDR PIN pairing impersonation as described; monitor for vendor/advisory updates for fixes and impact.
CVE-2021-33139
Technical details about CVE-2021-33139 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.
CVE-2021-33155
CVE-2021-33155 affects Intel Wireless/Bluetooth and Killer Bluetooth firmware prior to 22.100. It arises from improper input validation and may allow an authenticated user to cause a denial of service via adjacent access. Remediation is to upgrade to firmware version 22.100 or newer (per the prov...
CVE-2021-33110
CVE-2021-33110 involves improper input validation in Intel® Wireless Bluetooth® products and Killer™ Bluetooth® products on Windows 10/11 before version 22.80, potentially allowing an unauthenticated user to cause denial of service via adjacent access. The advisory Intel-SA-00581 lists affected I...
CVE-2021-33114
CVE-2021-33114 concerns improper input validation in Intel PROSet/Wireless WiFi and Killer WiFi software, potentially allowing an authenticated user to cause a denial of service via adjacent access. The connected Intel advisory (INTEL-SA-00582) specifies affected products and provides mitigations...
CVE-2021-33113
The CVE-2021-33113 entry involves Intel PROSet/Wireless WiFi and Killer WiFi software. Affected components are Intel PROSet/Wireless WiFi and Killer WiFi drivers on Windows 10/11 and related environments, where improper input validation can allow an unauthenticated user to cause denial of service...
CVE-2019-14620
CVE-2019-14620 involves insufficient control flow management in Intel Wireless Bluetooth products, potentially allowing an unprivileged actor to cause a denial of service via adjacent access. The connected Intel advisory (INTEL-SA-00337) confirms the flaw, lists affected Intel Wireless Bluetooth ...
CVE-2020-0554
Intel’s advisory (CVE-2020-0554) describes a race condition in the software installer for certain Intel Wireless Bluetooth products on Windows 7/8.1/10 that may allow an unprivileged user to escalate privileges locally. Affected products include multiple Intel Wireless Bluetooth adapters (e.g., W...
CVE-2020-0555
CVE-2020-0555 concerns improper input validation in Intel® Wireless Bluetooth® products that could allow an authenticated local user to escalate privileges. Connected sources confirm this affects Intel Wireless Bluetooth drivers across multiple Intel Wi‑Fi/Bluetooth platforms and list concrete re...
CVE-2020-0559
Intel PROSet/Wireless WiFi software for Windows 7/8.1 contains insecure inherited permissions that may allow an authenticated, local attacker to escalate privileges. The issue affects multiple Intel wireless adapters (e.g., AX200/AX201, Wireless-AC 9560/9462/9461/9260, 8265/8260/3168/7265, 3165, ...
CVE-2020-0553
CVE-2020-0553 describes an out-of-bounds read in the kernel-mode driver for certain Intel® Wireless Bluetooth® products on Windows 10, enabling a local-Privilege escalation information disclosure under some conditions. The Intel advisory (intel-sa-00337) details affected Intel Wireless Bluetooth ...
CVE-2021-0151
The CVE-2021-0151 entry describes an impairment of access control in the installer for Intel Wireless Bluetooth and Killer Bluetooth products on Windows 10, enabling a locally authenticated user to potentially escalate privileges. Affected products (Intel Wireless Bluetooth and Killer Bluetooth) ...
CVE-2021-0152
CVE-2021-0152 affects Intel® Wireless Bluetooth® and Killer™ Bluetooth® installer on Windows 10. The Red Hat/NVD entries and Intel advisory confirm the root cause: improper verification of the cryptographic signature in the installer, enabling a local, authenticated user to potentially cause a de...