CVE-2020-12321High· 8.8▾ TwilightImproper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.0%
Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
dual_band_wireless-ac_3168_firmware < 21.110dual_band_wireless-ac_8260_firmware < 21.110dual_band_wireless-ac_8265_firmware < 21.110wi-fi_6_ax200_firmware < 21.110wi-fi_6_ax201_firmware < 21.110wireless-ac_9260_firmware < 21.110wireless-ac_9461_firmware < 21.110wireless-ac_9462_firmware < 21.110wireless-ac_9560_firmware < 21.110wireless_7265_(rev_d)_firmware < 21.110dual_band_wireless-ac_3165_firmware < 21.110Upgrade past the affected range:
dual_band_wireless-ac_3168_firmware 21.110dual_band_wireless-ac_8260_firmware 21.110dual_band_wireless-ac_8265_firmware 21.110wi-fi_6_ax200_firmware 21.110wi-fi_6_ax201_firmware 21.110wireless-ac_9260_firmware 21.110wireless-ac_9461_firmware 21.110wireless-ac_9462_firmware 21.110wireless-ac_9560_firmware 21.110wireless_7265_(rev_d)_firmware 21.110dual_band_wireless-ac_3165_firmware 21.110Connected by shared product, vendor, weakness, or advisory.
CVE-2020-12322Medium· 6.5Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVE-2021-0146Medium· 6.8Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVE-2021-0114Medium· 6.7Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0095Medium· 4.4Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
CVE-2020-24489High· 8.8Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2020-24513Medium· 6.5Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.