6.5

CVE-2020-12314

Improper input validation in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Data is provided by the National Vulnerability Database (NVD)
IntelProset/wireless Wifi Version < 21.110
   IntelDual Band Wireless-ac 3165 Version-
   IntelDual Band Wireless-ac 3168 Version-
   IntelDual Band Wireless-ac 8260 Version-
   IntelDual Band Wireless-ac 8265 Version-
   IntelWi-fi 6 Ax200 Version-
   IntelWi-fi 6 Ax201 Version-
   IntelWireless-ac 9260 Version-
   IntelWireless-ac 9461 Version-
   IntelWireless-ac 9462 Version-
   IntelWireless-ac 9560 Version-
   IntelWireless 7265 (rev D) Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.09% 0.234
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.