CVE-2022-21240 Information disclosure in Intel(R) PROSet/Wireless WiFi products
A privileged local attacker can exploit an out-of-bounds read in Intel PROSet/Wireless WiFi drivers to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-21240?
CVE-2022-21240 is a medium-severity vulnerability in Intel(R) PROSet/Wireless WiFi products, published on 18 Aug 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access.
Weakness: CWE-125
Which versions are affected by CVE-2022-21240?
It affects 3 products.
Products include Intel Proset Wi-Fi 6e Ax210 Firmware, Intel Wi-Fi 6e Ax211 Firmware, Intel Wi-Fi 6e Ax411 Firmware.
How do I fix CVE-2022-21240?
No fix has been published for CVE-2022-21240 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-21240 being exploited?
There is no known exploitation of CVE-2022-21240 in the wild and no public exploit code.
Other vulnerabilities in Intel(R) PROSet/Wireless WiFi products
- CVE-2022-21139 Weak cryptography in Intel(R) PROSet/Wireless WiFi products
- CVE-2022-21160 Denial of service in Intel(R) PROSet/Wireless WiFi products
- CVE-2022-21197 Denial of service in Intel(R) PROSet/Wireless WiFi products
- CVE-2022-21172 Memory corruption in Intel(R) PROSet/Wireless WiFi products
- CVE-2022-21212 Denial of service in Intel(R) PROSet/Wireless WiFi products
Sources
Also known as GHSA-98j5-35x9-cvvc.