CVE-2021-23168

Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Score

CVSS 3.1 6.5 Medium

Status

Modified - secure@intel.com

Published

2022-08-18

Last modified

2025-05-05

Weaknesses

CWE-125

Affected products

• Dual Band Wireless-ac 3165 Firmware (Intel)
• Dual Band Wireless-ac 3168 Firmware (Intel)
• Dual Band Wireless-ac 8260 Firmware (Intel)
• Dual Band Wireless-ac 8265 Firmware (Intel)
• Killer Ac 1550 Firmware (Intel)
• Killer Wi-fi 6 Ax1650 Firmware (Intel)
• Killer Wi-fi 6e Ax1675 Firmware (Intel)
• Killer Wi-fi 6e Ax1690 Firmware (Intel)
• Proset Wi-fi 6e Ax210 Firmware (Intel)
• Wi-fi 6 Ax200 Firmware (Intel)
• Wi-fi 6 Ax201 Firmware (Intel)
• Wi-fi 6e Ax211 Firmware (Intel)
• Wi-fi 6e Ax411 Firmware (Intel)
• Wireless-ac 9260 Firmware (Intel)
• Wireless-ac 9461 Firmware (Intel)
• Wireless-ac 9462 Firmware (Intel)
• Wireless-ac 9560 Firmware (Intel)
• Wireless 7265 (rev D) Firmware (Intel)

References

• https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html