Intel PROSet/Wireless WiFi up to 21.69 on Windows 10 Kernel Mode Driver memory corruption

Summaryinfo

A vulnerability labeled as problematic has been found in Intel PROSet and Wireless WiFi up to 21.69 on Windows 10. This affects an unknown function of the component Kernel Mode Driver. The manipulation results in memory corruption. This vulnerability is cataloged as CVE-2020-0558. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Intel PROSet and Wireless WiFi up to 21.69 on Windows 10 (Wireless LAN Software). It has been classified as problematic. Affected is an unknown part of the component Kernel Mode Driver. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on availability. CVE summarizes:

Improper buffer restrictions in kernel mode driver for Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an unprivileged user to potentially enable denial of service via adjacent access.

The weakness was shared 04/15/2020. This vulnerability is traded as CVE-2020-0558 since 10/28/2019. The attack needs to be done within the local network. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available.

Upgrading to version 21.70 eliminates this vulnerability.

The entry VDB-153743 is related to this item. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Wireless LAN Software

Vendor

• Intel

Name

• PROSet
• Wireless WiFi

Version

• 21.0
• 21.1
• 21.2
• 21.3
• 21.4
• 21.5
• 21.6
• 21.7
• 21.8
• 21.9
• 21.10
• 21.11
• 21.12
• 21.13
• 21.14
• 21.15
• 21.16
• 21.17
• 21.18
• 21.19
• 21.20
• 21.21
• 21.22
• 21.23
• 21.24
• 21.25
• 21.26
• 21.27
• 21.28
• 21.29
• 21.30
• 21.31
• 21.32
• 21.33
• 21.34
• 21.35
• 21.36
• 21.37
• 21.38
• 21.39
• 21.40
• 21.41
• 21.42
• 21.43
• 21.44
• 21.45
• 21.46
• 21.47
• 21.48
• 21.49
• 21.50
• 21.51
• 21.52
• 21.53
• 21.54
• 21.55
• 21.56
• 21.57
• 21.58
• 21.59
• 21.60
• 21.61
• 21.62
• 21.63
• 21.64
• 21.65
• 21.66
• 21.67
• 21.68
• 21.69

License

• commercial

Website

• Vendor: https://www.intel.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion