CVE-2021-37409

HIGH

Intel Wireless and Killer WiFi Firmware - Privilege Escalation via Improper Access Control

Title source: llm

Description

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

References (2)

Core 2

Core References

Mailing List mailing-list

https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html

Patch, Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html

Scores

CVSS v3 7.8

EPSS 0.0011

EPSS Percentile 28.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-863

Status published

Products (13)

intel/killer_ac_1550_firmware < 3.1122.1105

intel/killer_wi-fi_6_ax1650_firmware < 3.1122.1105

intel/killer_wi-fi_6e_ax1675_firmware < 3.1122.1105

intel/killer_wi-fi_6e_ax1690_firmware < 3.1122.1105

intel/proset_wi-fi_6e_ax210_firmware < 22.120

intel/wi-fi_6_ax200_firmware < 22.120

intel/wi-fi_6_ax201_firmware < 22.120

intel/wi-fi_6e_ax211_firmware < 22.120

intel/wi-fi_6e_ax411_firmware < 22.120

intel/wireless-ac_9260_firmware < 22.120

... and 3 more

Published Aug 18, 2022

Tracked Since Feb 18, 2026