CVE-2021-0082 Privilege escalation in Intel(R) PROSet/Wireless WiFi in Windows 10

High 7.8 Published 17 Nov 2021 Updated 3 Aug 2024

An authenticated local attacker can exploit an uncontrolled search path in the Intel PROSet/Wireless WiFi installer to escalate privileges on Windows 10.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2021-0082?

CVE-2021-0082 is a high-severity vulnerability in Intel(R) PROSet/Wireless WiFi in Windows 10, published on 17 Nov 2021. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness: CWE-427

Which versions are affected by CVE-2021-0082?

It affects 15 products.

Products include Intel 7265 Firmware, Intel Ac1550 Firmware, Intel Ac 3165 Firmware, Intel Ac 3168 Firmware, Intel Ac 8260 Firmware, Intel Ac 8265 Firmware and 9 more.

How do I fix CVE-2021-0082?

No fix has been published for CVE-2021-0082 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-0082 being exploited?

There is no known exploitation of CVE-2021-0082 in the wild and no public exploit code.

Sources

Also known as GHSA-xqj5-x7c8-6f4h.