8.8

CVE-2021-0071

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Ax210 Firmware Version < 22.40
   Intel ≫ Ax210 Version-
Intel ≫ Ax201 Firmware Version < 22.40
   Intel ≫ Ax201 Version-
Intel ≫ Ax200 Firmware Version < 22.40
   Intel ≫ Ax200 Version-
Intel ≫ Ac 9560 Firmware Version < 22.40
   Intel ≫ Ac 9560 Version-
Intel ≫ Ac 9462 Firmware Version < 22.40
   Intel ≫ Ac 9462 Version-
Intel ≫ Ac 9461 Firmware Version < 22.40
   Intel ≫ Ac 9461 Version-
Intel ≫ 9260 Firmware Version-
   Intel ≫ Ac 9260 Version-
Intel ≫ Ac 9260 Firmware Version < 22.40
   Intel ≫ Ac 9260 Version-
Intel ≫ Ac 8265 Firmware Version < 22.40
   Intel ≫ Ac 8265 Version-
Intel ≫ Ac 8260 Firmware Version < 22.40
   Intel ≫ Ac 8260 Version-
Intel ≫ Ac 3168 Firmware Version < 22.40
   Intel ≫ Ac 3168 Version-
Intel ≫ 7265 Firmware Version < 22.40
   Intel ≫ 7265 Version-
Intel ≫ Ac 3165 Firmware Version < 22.40
   Intel ≫ Ac 3165 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.447
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.