CVE-2020-12322CWE-20

CVE-2020-12322

Medium · published November 12, 2020

CVSS v3.1
6.5
EPSS
0%
Percentile
39.0
In the wild
Unconfirmed
What it is

Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00461 · 39.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-11-12T23:15Z
Affected products (11)
ProductVersionsFixed in
intel/dual_band_wireless-ac_3168_firmware< 21.11021.110
intel/dual_band_wireless-ac_8260_firmware< 21.11021.110
intel/dual_band_wireless-ac_8265_firmware< 21.11021.110
intel/wi-fi_6_ax200_firmware< 21.11021.110
intel/wi-fi_6_ax201_firmware< 21.11021.110
intel/wireless-ac_9260_firmware< 21.11021.110
intel/wireless-ac_9461_firmware< 21.11021.110
intel/wireless-ac_9462_firmware< 21.11021.110
intel/wireless-ac_9560_firmware< 21.11021.110
intel/wireless_7265_\(rev_d\)_firmware< 21.11021.110
intel/dual_band_wireless-ac_3165_firmware< 21.11021.110
References (2)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403 · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00403 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 12 NOV 18:12Z
    Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial…
    cvelistv5