CVE-2021-0082

High

Description

Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

SeverityHigh
CVSS7.8
Exploit probability—
ProductIntel Ax210 Firmware
PublishedNov 17, 2021
First seenNov 17, 2021

How to fix

Update
  • intel ax210_firmware22.40 or later
  • intel ax201_firmware22.40 or later
  • intel ax200_firmware22.40 or later
  • intel ac_9560_firmware22.40 or later
  • intel ac_9462_firmware22.40 or later
  • intel ac_9461_firmware22.40 or later
  • intel ac_9260_firmware22.40 or later
  • intel ac_8265_firmware22.40 or later
  • intel ac_8260_firmware22.40 or later
  • intel ac_3168_firmware22.40 or later
  • intel 7265_firmware22.40 or later
  • intel ac_3165_firmware22.40 or later

Affected products

ProductAffected versionsFixed in
intel ax210_firmwarev < 22.4022.40
intel ax201_firmwarev < 22.4022.40
intel ax200_firmwarev < 22.4022.40
intel ac_9560_firmwarev < 22.4022.40
intel ac_9462_firmwarev < 22.4022.40
intel ac_9461_firmwarev < 22.4022.40
intel ac_9260_firmwarev < 22.4022.40
intel ac_8265_firmwarev < 22.4022.40
intel ac_8260_firmwarev < 22.4022.40
intel ac_3168_firmwarev < 22.4022.40
intel 7265_firmwarev < 22.4022.40
intel ac_3165_firmwarev < 22.4022.40
intel ax1675_firmwarev < 2.4.15412.4.1541
intel ax1650_firmwarev < 2.4.15412.4.1541
intel ac1550_firmwarev < 2.4.15412.4.1541

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-0082 · Intel Ax210 Firmware · Dark Radar