Skip to main content

Ac 3165 Firmware CVE-2020-0559

HIGH
Incorrect Permission Assignment for Critical Resource (CWE-732)
2020-08-13 secure@intel.com
Privilege Escalation Intel Microsoft Ac 3165 Firmware Ac 3168 Firmware Ac 7265 Firmware Ac 8260 Firmware Ac 8265 Firmware Ac 9260 Firmware Ac 9461 Firmware Ac 9462 Firmware Ac 9560 Firmware Ax200 Firmware Ax201 Firmware Atom X5 E3930 Atom X5 E3940 Atom X7 E3950 Celeron J1750 Celeron J1800 Celeron J1850 Celeron J1900 Celeron J3060 Celeron J3160 Celeron J3355 Celeron J3355E Celeron J3455 Celeron J3455E Celeron J4005 Celeron J4025 Celeron J4105 Celeron J4125 Celeron J6412 Celeron J6413 Celeron N2805 Celeron N2806 Celeron N2807 Celeron N2808 Celeron N2810 Celeron N2815 Celeron N2820 Celeron N2830 Celeron N2840 Celeron N2910 Celeron N2920 Celeron N2930 Celeron N2940 Celeron N3000 Celeron N3010 Celeron N3050 Celeron N3060 Celeron N3150 Celeron N3160 Celeron N3350 Celeron N3350E Celeron N3450 Celeron N4000 Celeron N4020 Celeron N4100 Celeron N4120 Celeron N4500 Celeron N4505 Celeron N5100 Celeron N5105 Celeron N6210 Celeron N6211 Pentium J2850 Pentium J2900 Pentium J3710 Pentium J4205 Pentium J6426 Pentium N3510 Pentium N3520 Pentium N3530 Pentium N3540 Pentium N3700 Pentium N3710 Pentium N4200 Pentium N4200E Pentium N6415
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 13, 2020 - 04:15 nvd
HIGH 7.8

DescriptionNVD

Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

AnalysisAI

Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Incorrect Permission Assignment vulnerability could allow attackers to access resources due to misconfigured permissions.

Technical ContextAI

This vulnerability is classified as Incorrect Permission Assignment (CWE-732), which allows attackers to access resources due to misconfigured permissions. Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Affected products include: Intel Ac 3165 Firmware, Intel Ac 3168 Firmware, Intel Ac 7265 Firmware, Intel Ac 8260 Firmware, Intel Ac 8265 Firmware. Version information: version 21.40.5.1.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Review and restrict file/resource permissions, apply principle of least privilege.

More in Ac 3165 Firmware

View all
CVE-2021-0071 HIGH
8.8 Nov 17

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user t
CVE-2021-0078 HIGH
8.1 Nov 17

Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow
CVE-2021-0151 HIGH
7.8 Nov 17

Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in
CVE-2021-0082 HIGH
7.8 Nov 17

Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticate
CVE-2021-0065 HIGH
7.8 Nov 17

Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.4
CVE-2021-0064 HIGH
7.8 Nov 17

Insecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.
CVE-2020-0555 HIGH
7.8 Aug 13

Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentiall
CVE-2020-0554 HIGH
7.0 Aug 13

Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allo
CVE-2021-0079 MEDIUM
6.5 Nov 17

Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow
CVE-2021-0069 MEDIUM
6.5 Nov 17

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Kill
CVE-2021-0063 MEDIUM
6.5 Nov 17

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow
CVE-2021-0053 MEDIUM
5.7 Nov 17

Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow a

Same weakness CWE-732 – Incorrect Permission Assignment for Critical Resource

View all
CVE-2017-9462 HIGH POC
8.8
CVE-2017-3006 HIGH POC
8.8
CVE-2017-9602 CRITICAL POC
9.8
CVE-2022-22960 HIGH POC
7.8
CVE-2021-38085 HIGH POC
7.8
CVE-2021-35449 HIGH POC
7.8
CVE-2020-11855 HIGH POC
7.8
CVE-2020-10883 HIGH POC
7.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2020-0559 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy