CVE-2021-33155

moderate-risk

Published 2022-02-09

Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access.

Do I need to act?

0.10% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.7/10 Medium

ADJACENT_NETWORK / LOW complexity

Affected Products (16)

Ax211 Firmware

Ax210 Firmware

Ax201 Firmware

Ax200 Firmware

Ac 9560 Firmware

Ac 9462 Firmware

Ac 9461 Firmware

Ac 9260 Firmware

Ac 8265 Firmware

Ac 8260 Firmware

Ac3168 Firmware

Ac 7265 Firmware

Ac 3165 Firmware

Ax1675 Firmware

Ax1650 Firmware

Ac 1550 Firmware

Affected Vendors

Intel

References (2)

Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00604....

/ 100

moderate-risk

Severity 19/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 18/34 · Moderate