CVE-2024-28049: Input Validation
Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20240610-1 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20250410-2Fixed in 20260916-1 - Upgrade
Upgrade
Intel PROSet/Wireless Software and Intel Killer Wi-Fi wireless productsto a version that resolves this vulnerability.Fixed in 23.40
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28049?
CVE-2024-28049 has a medium severity rating due to the potential for denial of service.
How do I fix CVE-2024-28049?
To mitigate CVE-2024-28049, update the Intel PROSet/Wireless Software or Intel Killer Wi-Fi to version 23.40 or later.
Which products are affected by CVE-2024-28049?
CVE-2024-28049 affects Intel PROSet/Wireless Software and Intel Killer Wi-Fi products prior to version 23.40.
What type of vulnerability is CVE-2024-28049?
CVE-2024-28049 is an improper input validation vulnerability that can lead to denial of service.
Who can exploit CVE-2024-28049?
An unauthenticated user within adjacent access can exploit CVE-2024-28049 to cause a denial of service.