Intel Inet Wireless Daemon vulnerabilities

4 CVEs affecting Intel Inet Wireless Daemon, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-28084, published 2024-03-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-52161, published 2024-02-22. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can…
CVE-2024-28084, published 2024-03-03. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact because of initialization issues in…
CVE-2020-17497, published 2020-08-12. High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days. eapol.c in iNet wireless daemon (IWD) through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4.
CVE-2020-8689, published 2020-08-13. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated user to potentially enable denial of service via adjacent access.