Ac 8260 Firmware CVE-2020-0559

HIGH

Incorrect Permission Assignment for Critical Resource (CWE-732)

2020-08-13 secure@intel.com

Privilege Escalation Microsoft Intel Ac 8260 Firmware Ac 8265 Firmware Ac 9260 Firmware Ac 9560 Firmware Celeron N2840 Atom X5 E3930 Atom X5 E3940 Atom X7 E3950 Celeron N2805 Celeron N2806 Celeron N2807 Celeron N2808 Celeron N2810 Celeron N2815 Celeron N2820 Celeron N2830 Celeron N2920 Pentium N3520 Pentium J3710 Pentium N3700 Pentium N3710 Celeron J3060 Celeron J3160 Celeron J3355 Celeron J3455 Pentium J4205 Pentium N4200 Celeron N3350 Celeron N3450 Celeron J1750 Celeron J1800 Celeron J1850 Celeron J1900 Celeron J3355E Celeron J4025 Celeron J4125 Celeron N2910 Celeron N3010 Celeron N3050 Celeron N3060 Celeron N3150 Celeron N3160 Celeron N3350E Celeron N4020 Celeron N4120 Celeron N2930 Celeron N2940 Pentium J2850 Pentium J2900 Pentium N3510 Pentium N3530 Pentium N3540 Ax201 Firmware Ax200 Firmware Ac 9462 Firmware Ac 9461 Firmware Ac 3168 Firmware Ac 7265 Firmware Ac 3165 Firmware Celeron J3455E Celeron J4005 Celeron J4105 Celeron J6412 Celeron J6413 Celeron N3000 Celeron N4000 Celeron N4100 Celeron N4500 Celeron N4505 Celeron N5100 Celeron N5105 Celeron N6210 Celeron N6211 Pentium J6426 Pentium N4200E Pentium N6415

7.8

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-732 OWASP Top 10:2025 A01:2025 - Broken Access Control ASVS 5.0 V13 - Configuration Permission assignment review
Impact	CVSS score of 7.8 (HIGH). Attack characteristics: local attack vector, low complexity, low privileges required, no user interaction not required.
Exploit ScenarioDerived	A local attacker with access to the system could access resources due to misconfigured permissions.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

Patch available 0.3% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

AnalysisAI

Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Incorrect Permission Assignment vulnerability could allow attackers to access resources due to misconfigured permissions.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Review and restrict file/resource permissions, apply principle of least privilege.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check

Technical ContextAI · show details

This vulnerability is classified as Incorrect Permission Assignment (CWE-732), which allows attackers to access resources due to misconfigured permissions. Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Affected products include: Intel Ac 3165 Firmware, Intel Ac 3168 Firmware, Intel Ac 7265 Firmware, Intel Ac 8260 Firmware, Intel Ac 8265 Firmware. Version information: version 21.40.5.1.

Know when Ac 8260 Firmware gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

DescriptionNVD

Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Threat Intelligence Overview

EPSS Score

0.3%

Top 79% exploitable

Data Quality

2 sources

Confidence: Low

CVE.org

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.3%

Patch available Yes

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Defer

Exploitation· derived

None

System Exposure· derived

Small

Automatable· derived

No

Human Impact· derived

Medium

Priority Score

39

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +39

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Privilege Escalation HIGH

Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.

Affected Products (CPE)NVD

cpe:2.3:o:intel:ac_3165_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ac_3168_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ac_7265_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ac_8260_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ac_8265_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ac_9260_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ac_9461_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ac_9462_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ac_9560_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ax200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:intel:ax201_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:atom_x5-e3930:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:atom_x5-e3940:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:atom_x7-e3950:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:celeron_j1750:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:celeron_j1800:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:celeron_j1850:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:celeron_j1900:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:celeron_j3060:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:celeron_j3160:-:*:*:*:*:*:*:*

+ 56 more

More in Ac 8260 Firmware

View all

CVE-2020-24588 LOW Monitor POC

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn

CVE-2021-0071 HIGH This Week

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user t

CVE-2020-26140 MEDIUM This Month

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. Rated medium severity (CVSS 6.5), this v

CVE-2021-0078 HIGH This Week

Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow

CVE-2021-0151 HIGH This Week

Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in

CVE-2021-0082 HIGH This Week

Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticate

CVE-2021-0065 HIGH This Week

Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.4

CVE-2021-0064 HIGH This Week

Insecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.

CVE-2020-0555 HIGH This Week

Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentiall

CVE-2020-26139 MEDIUM This Month

An issue was discovered in the kernel in NetBSD 7.1. Rated medium severity (CVSS 5.3), this vulnerability is no authenti

CVE-2020-0554 HIGH This Week

Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allo

CVE-2021-0079 MEDIUM This Month

Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow

Same weakness CWE-732 – Incorrect Permission Assignment for Critical Resource

View all

CVE-2017-9462 HIGH POC

CVE-2017-3006 HIGH POC

CVE-2017-9602 CRITICAL POC

CVE-2022-22960 HIGH POC

CVE-2021-38085 HIGH POC

CVE-2021-35449 HIGH POC

CVE-2020-11855 HIGH POC

CVE-2020-10883 HIGH POC

Same technique Privilege Escalation

View all

CVE-2024-0012 CRITICAL POC

CVE-2025-47812 CRITICAL POC

CVE-2013-0422 CRITICAL POC

CVE-2013-0632 CRITICAL POC

CVE-2024-9474 MEDIUM POC

CVE-2017-5689 CRITICAL POC

CVE-2021-20021 CRITICAL POC

CVE-2017-12635 CRITICAL POC

References

Advisories & patches

PATCH https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00355.html ADVISORY https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00360.html

Search Externally

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy