CVE-2021-0071: Input Validation
First published: Wed Nov 17 2021(Updated: )
Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel AX210 Firmware | <22.40 | |
| Intel Wi-Fi 6 AX210 | ||
| Intel Wi-Fi 6 AX201 Firmware | <22.40 | |
| Intel AX201 Firmware | ||
| Intel AX200 Firmware | <22.40 | |
| Intel AX200 Firmware | ||
| Intel AC 9560 Firmware | <22.40 | |
| Intel Wireless-AC 9560 | ||
| Intel PROSet AC 9462 Firmware | <22.40 | |
| Intel ProSet AC 9462 | ||
| Intel PROSet AC 9461 Firmware | <22.40 | |
| Intel ProSet AC 9461 | ||
| Intel Wireless-AC 9260 Firmware | ||
| Intel ProSet AC 9260 Firmware | <22.40 | |
| Intel PROSet Wireless for AC 9260 | ||
| Intel ProSet AC 8265 Firmware | <22.40 | |
| Intel AC 8265 Firmware | ||
| Intel ProSet Wireless Software and Drivers for Ac 8260 | <22.40 | |
| Intel PROSet AC 8260 | ||
| Intel ProSet AC 3168 Firmware | <22.40 | |
| Intel AC 3168 Firmware | ||
| Red Hat Iwl7265-firmware | <22.40 | |
| Intel Wireless 7265 | ||
| Intel PROSet/Wireless Software for Intel Dual Band Wireless-AC 3165 | <22.40 | |
| Intel AC 3165 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-0071?
CVE-2021-0071 is a vulnerability that involves improper input validation in the firmware for some Intel PROSet/Wireless WiFi in UEFI, which may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
What is the severity of CVE-2021-0071?
The severity of CVE-2021-0071 is rated as high with a severity value of 8.8.
Which software is affected by CVE-2021-0071?
The affected software includes Intel Ax210 Firmware, Intel Ax201 Firmware, Intel Ax200 Firmware, Intel Ac 9560 Firmware, Intel Ac 9462 Firmware, Intel Ac 9461 Firmware, Intel 9260 Firmware, Intel Ac 9260 Firmware, Intel Ac 8265 Firmware, Intel Ac 8260 Firmware, Intel Ac 3168 Firmware, Intel 7265 Firmware, and Intel Ac 3165 Firmware.
How can an unauthenticated user exploit CVE-2021-0071?
An unauthenticated user can potentially enable escalation of privilege via adjacent access due to improper input validation in the firmware.
Where can I find more information about CVE-2021-0071?
You can find more information about CVE-2021-0071 in the Intel Security Center Advisory at the following URL: [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html)
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel ax210 firmware
- canonical/intel wi-fi 6 ax210
- canonical/intel wi-fi 6 ax201 firmware
- canonical/intel ax201 firmware
- canonical/intel ax200 firmware
- canonical/intel ac 9560 firmware
- canonical/intel wireless-ac 9560
- canonical/intel proset ac 9462 firmware
- canonical/intel proset ac 9462
- canonical/intel proset ac 9461 firmware
- canonical/intel proset ac 9461
- canonical/intel wireless-ac 9260 firmware
- canonical/intel proset ac 9260 firmware
- canonical/intel proset wireless for ac 9260
- canonical/intel proset ac 8265 firmware
- canonical/intel ac 8265 firmware
- canonical/intel proset wireless software and drivers for ac 8260
- canonical/intel proset ac 8260
- canonical/intel proset ac 3168 firmware
- canonical/intel ac 3168 firmware
- canonical/red hat iwl7265-firmware
- canonical/intel wireless 7265
- canonical/intel proset/wireless software for intel dual band wireless-ac 3165
- canonical/intel ac 3165 firmware