Intel Wi-Fi 6e AX411 Firmware vulnerabilities

14 CVEs affecting Intel Wi-Fi 6e AX411 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-28667, published 2022-11-11.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-21160, published 2022-08-18. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access.
• CVE-2022-21197, published 2022-08-18. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access.
• CVE-2021-44545, published 2022-08-18. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
• CVE-2021-23168, published 2022-08-18. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
• CVE-2022-21212, published 2022-08-18. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
• CVE-2022-28667, published 2022-11-11. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
• CVE-2021-23223, published 2022-08-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2021-37409, published 2022-08-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2022-21240, published 2022-08-18. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access.
• CVE-2022-21172, published 2022-08-18. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

Latest

• CVE-2022-21140, published 2022-08-18. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable information disclosure via local access.
• CVE-2022-21139, published 2022-08-18. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.