Skip to main content

Ax201 Firmware CVE-2020-0569

MEDIUM
Out-of-bounds Write (CWE-787)
2020-11-23 secure@intel.com
5.7
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.7 MEDIUM
AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 23, 2020 - 17:15 nvd
MEDIUM 5.7

DescriptionNVD

Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.

AnalysisAI

Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access. Affected products include: Intel Ax201 Firmware, Intel Ax200 Firmware, Intel Ac 9560 Firmware, Intel Ac 9462 Firmware, Intel Ac 9461 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).

CVE-2021-0071 HIGH
8.8 Nov 17

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user t

CVE-2021-0078 HIGH
8.1 Nov 17

Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow

CVE-2021-0151 HIGH
7.8 Nov 17

Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in

CVE-2021-0082 HIGH
7.8 Nov 17

Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticate

CVE-2021-0065 HIGH
7.8 Nov 17

Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.4

CVE-2021-0064 HIGH
7.8 Nov 17

Insecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.

CVE-2020-0559 HIGH
7.8 Aug 13

Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40

CVE-2020-0555 HIGH
7.8 Aug 13

Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentiall

CVE-2020-0554 HIGH
7.0 Aug 13

Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allo

CVE-2021-0079 MEDIUM
6.5 Nov 17

Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow

CVE-2021-0069 MEDIUM
6.5 Nov 17

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Kill

CVE-2021-0063 MEDIUM
6.5 Nov 17

Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow

Share

CVE-2020-0569 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy