CVE-2020-0559

HIGH

Intel AC 3165 Firmware < 21.40.5.1 - Incorrect Permission Assignment

Title source: rule
STIX 2.1

Description

Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 7.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-732
Status published
Products (50)
intel/ac_3165_firmware < 21.40.5.1
intel/ac_3168_firmware < 21.40.5.1
intel/ac_7265_firmware < 21.40.5.1
intel/ac_8260_firmware < 21.40.5.1
intel/ac_8265_firmware < 21.40.5.1
intel/ac_9260_firmware < 21.40.5.1
intel/ac_9461_firmware < 21.40.5.1
intel/ac_9462_firmware < 21.40.5.1
intel/ac_9560_firmware < 21.40.5.1
intel/atom_x5-e3930
... and 40 more
Published Aug 13, 2020
Tracked Since Feb 18, 2026