CVE-2024-25563: Medium severity Intel PROSet/Wireless Software vulnerability
Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow a privileged user to potentially enable information disclosure via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20240610-1 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20250410-2Fixed in 20260916-1 - Upgrade
Upgrade
Intel PROSet/Wireless Software and Intel Killer Wi-Fito a version that resolves this vulnerability.Fixed in 23.40
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25563?
CVE-2024-25563 is considered a moderate severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2024-25563?
To fix CVE-2024-25563, update the Intel PROSet/Wireless Software or Intel Killer Wi-Fi to version 23.40 or later.
Who is affected by CVE-2024-25563?
CVE-2024-25563 affects users of Intel PROSet/Wireless Software and Intel Killer Wi-Fi prior to version 23.40.
What type of vulnerability is CVE-2024-25563?
CVE-2024-25563 is classified as an improper initialization vulnerability.
Can a local user exploit CVE-2024-25563?
Yes, a privileged local user can potentially exploit CVE-2024-25563 to enable information disclosure.