CVE-2021-23188 Information disclosure in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products

What is CVE-2021-23188?

CVE-2021-23188 is a low-severity vulnerability in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products, published on 18 Aug 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated user to potentially enable information disclosure via local access.

Which versions are affected by CVE-2021-23188?

It affects 18 products.

Products include Intel Dual Band Wireless-Ac 3165 Firmware, Intel Dual Band Wireless-Ac 3168 Firmware, Intel Dual Band Wireless-Ac 8260 Firmware, Intel Dual Band Wireless-Ac 8265 Firmware, Intel Killer Ac 1550 Firmware, Intel Killer Wi-Fi 6 Ax1650 Firmware and 12 more.

How do I fix CVE-2021-23188?

No fix has been published for CVE-2021-23188 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-23188 being exploited?

There is no known exploitation of CVE-2021-23188 in the wild and no public exploit code.

Other vulnerabilities in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products

• CVE-2020-12321 Privilege escalation in Intel(R) Wireless Bluetooth(R) High 8.8
• CVE-2019-11152 Memory corruption in Intel(R) WIFI Drivers and Intel(R) PROSet/Wireless WiFi Software extension DLL High 8.8
• CVE-2021-33847 Memory corruption in Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products High 7.8
• CVE-2019-11151 Memory corruption in Intel(R) WIFI Drivers and Intel(R) PROSet/Wireless WiFi Software extension DLL High 7.8
• CVE-2021-23179 Information disclosure in Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products High 7.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6c4c-252v-4649.