6.7

CVE-2023-25951

Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privileged user to potentially enable escalation of privilege via local access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Killer Version < 3.1423.712
   Intel ≫ Killer Wi-fi 6e Ax1675 Version-
   Intel ≫ Killer Wi-fi 6e Ax1690 Version-
   Intel ≫ Proset Wi-fi 6e Ax210 Version-
   Intel ≫ Wi-fi 6e Ax211 Version-
   Intel ≫ Wi-fi 6e Ax411 Version-
Intel ≫ Proset/wireless Version < 22.240
   Intel ≫ Killer Wi-fi 6e Ax1675 Version-
   Intel ≫ Killer Wi-fi 6e Ax1690 Version-
   Intel ≫ Proset Wi-fi 6e Ax210 Version-
   Intel ≫ Wi-fi 6e Ax211 Version-
   Intel ≫ Wi-fi 6e Ax411 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.214
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
secure@intel.com 6 0.8 5.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.