CVE-2022-21139

HIGH

Intel Wireless-ac 9560 Firmware < 22.120 - Weak Encryption

Title source: rule

Description

Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

References (1)

[Patch, Vendor Advisory] https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html

Scores

CVSS v3 8.8

EPSS 0.0019

EPSS Percentile 40.9%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-326

Status published

Products (9)

intel/proset_wi-fi_6e_ax210_firmware < 22.120

intel/wi-fi_6_ax200_firmware < 22.120

intel/wi-fi_6_ax201_firmware < 22.120

intel/wi-fi_6e_ax211_firmware < 22.120

intel/wi-fi_6e_ax411_firmware < 22.120

intel/wireless-ac_9260_firmware < 22.120

intel/wireless-ac_9461_firmware < 22.120

intel/wireless-ac_9462_firmware < 22.120

intel/wireless-ac_9560_firmware < 22.120

Published Aug 18, 2022

Tracked Since Feb 18, 2026