Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HIntel Ac 3165 Firmware
OSIntel< 21.40.5.1Intel Ac 3168 Firmware
OSIntel< 21.40.5.1Intel Ac 7265 Firmware
OSIntel< 21.40.5.1Intel Ac 8260 Firmware
OSIntel< 21.40.5.1Intel Ac 8265 Firmware
OSIntel< 21.40.5.1Intel Ac 9260 Firmware
OSIntel< 21.40.5.1Intel Ac 9461 Firmware
OSIntel< 21.40.5.1Intel Ac 9462 Firmware
OSIntel< 21.40.5.1Intel Ac 9560 Firmware
OSIntel< 21.40.5.1Intel Atom X5 E3930
HWIntelall versionsIntel Atom X5 E3940
HWIntelall versionsIntel Atom X7 E3950
HWIntelall versionsIntel Ax200 Firmware
OSIntel< 21.40.5.1Intel Ax201 Firmware
OSIntel< 21.40.5.1Intel Celeron J1750
HWIntelall versionsIntel Celeron J1800
HWIntelall versionsIntel Celeron J1850
HWIntelall versionsIntel Celeron J1900
HWIntelall versionsIntel Celeron J3060
HWIntelall versionsIntel Celeron J3160
HWIntelall versionsIntel Celeron J3355
HWIntelall versionsIntel Celeron J3355e
HWIntelall versionsIntel Celeron J3455
HWIntelall versionsIntel Celeron J3455e
HWIntelall versionsIntel Celeron J4005
HWIntelall versionsIntel Celeron J4025
HWIntelall versionsIntel Celeron J4105
HWIntelall versionsIntel Celeron J4125
HWIntelall versionsIntel Celeron J6412
HWIntelall versionsIntel Celeron J6413
HWIntelall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2020-0646CRITICAL9.8⚠ KEVPL ✓same product
RCE w Microsoft .NET Framework — nieprawidłowa walidacja danych wejściowych
CVE-2019-0708CRITICAL9.8⚠ KEVPL ✓same product
BlueKeep — krytyczny RCE w Remote Desktop Services (RDP)
CVE-2017-8543CRITICAL9.8⚠ KEVPL ✓same product
RCE w Windows Search — przejęcie kontroli nad systemem
CVE-2016-4171CRITICAL9.8⚠ KEVPL ✓same product
RCE w Adobe Flash Player 21.0.0.242 i wcześniejszych — aktywnie exploitowany
CVE-2016-1019CRITICAL9.8⚠ KEVPL ✓same product
Adobe Flash Player — RCE lub DoS przez nieokreślone wektory ataku