Skip to main content

Ac 3165 Firmware CVE-2020-0554

HIGH
Race Condition (CWE-362)
2020-08-13 secure@intel.com
Race Condition Privilege Escalation Intel Microsoft Ac 3165 Firmware Ac 3168 Firmware Ac 7265 Firmware Ac 8260 Firmware Ac 8265 Firmware Ac 9260 Firmware Ac 9461 Firmware Ac 9462 Firmware Ac 9560 Firmware Ax200 Firmware Ax201 Firmware
7.0
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.0 HIGH
AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 13, 2020 - 04:15 nvd
HIGH 7.0

DescriptionNVD

Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allow an unprivileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allow an unprivileged user to potentially enable escalation of privilege via local. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

Technical ContextAI

This vulnerability is classified under CWE-362. Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allow an unprivileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Ac 3165 Firmware, Intel Ac 3168 Firmware, Intel Ac 7265 Firmware, Intel Ac 8260 Firmware, Intel Ac 8265 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ac 3165 Firmware

View all
CVE-2021-0071 HIGH
8.8 Nov 17

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user t
CVE-2021-0078 HIGH
8.1 Nov 17

Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow
CVE-2021-0151 HIGH
7.8 Nov 17

Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in
CVE-2021-0082 HIGH
7.8 Nov 17

Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticate
CVE-2021-0065 HIGH
7.8 Nov 17

Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.4
CVE-2021-0064 HIGH
7.8 Nov 17

Insecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.
CVE-2020-0559 HIGH
7.8 Aug 13

Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40
CVE-2020-0555 HIGH
7.8 Aug 13

Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentiall
CVE-2021-0079 MEDIUM
6.5 Nov 17

Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow
CVE-2021-0069 MEDIUM
6.5 Nov 17

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Kill
CVE-2021-0063 MEDIUM
6.5 Nov 17

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow
CVE-2021-0053 MEDIUM
5.7 Nov 17

Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow a

Same weakness CWE-362 – Race Condition

View all
CVE-2016-5195 HIGH POC
7.0
CVE-2017-1000112 HIGH POC
7.0
CVE-2014-0196 MEDIUM POC
5.5
CVE-2014-0226 MEDIUM POC
6.8
CVE-2016-1757 HIGH POC
7.0
CVE-2016-8655 HIGH POC
7.8
CVE-2015-5754 CRITICAL POC
9.3
CVE-2015-8556 CRITICAL POC
10.0

Same technique Race Condition

View all
CVE-2016-5195 HIGH POC
7.0
CVE-2017-1000112 HIGH POC
7.0
CVE-2014-0196 MEDIUM POC
5.5
CVE-2014-0226 MEDIUM POC
6.8
CVE-2026-27175 CRITICAL POC
9.8
CVE-2016-1757 HIGH POC
7.0
CVE-2016-8655 HIGH POC
7.8
CVE-2015-5754 CRITICAL POC
9.3

Share

CVE-2020-0554 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy