7.3

CVE-2021-0105

Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
IntelAc 9461 Firmware Version < 22.0
   IntelAc 9461 Version-
IntelAc 9462 Firmware Version < 22.0
   IntelAc 9462 Version-
IntelAc 9560 Firmware Version < 22.0
   IntelAc 9560 Version-
IntelWi-fi 6 Ax200 Firmware Version < 22.0
   IntelWi-fi 6 Ax200 Version-
IntelWi-fi 6 Ax201 Firmware Version < 22.0
   IntelWi-fi 6 Ax201 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.195
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.3 2.1 5.2
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
nvd@nist.gov 4.1 5.1 4.9
AV:A/AC:L/Au:S/C:P/I:N/A:P
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.