Privilege escalation in Intel Wireless Bluetooth and Killer Bluetooth products

1) Improper access control

EUVDB-ID: #VU104104

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-37577

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to improper access restrictions. A remote attacker on the local network can bypass implemented security restrictions and gain elevated privileges on the target system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Killer Wi-Fi 6E AX1675: All versions

Killer Wi-Fi 6 AX1650: All versions

Killer Wireless-AC 1550: All versions

Intel Wi-Fi 6 AX211: All versions

Intel Wi-Fi 6 AX210: All versions

Intel Wi-Fi 6 AX201: All versions

Intel Wi-Fi 6 AX200: All versions

Intel Wireless-AC 9560: All versions

Intel Wireless-AC 9462: All versions

Intel Wireless-AC 9461: All versions

Intel Wireless-AC 9260: All versions

Intel Dual Band Wireless-AC 8265: All versions

Intel Dual Band Wireless-AC 8260: All versions

Intel Dual Band Wireless-AC 3168: All versions

Intel Wireless 7265 (Rev D) Family: All versions

Intel Dual Band Wireless-AC 3165: All versions

Intel Wireless Bluetooth: before 22.100

Intel Killer Bluetooth: before 22.100

CPE2.3

• cpe:2.3:h:intel:killer_wi-fi_6e_ax1675:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:killer_wi-fi_6_ax1650:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:killer_wireless-ac_1550:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_wi-fi_6_ax211:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_wi-fi_6_ax210:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_wi-fi_6_ax201:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_wi-fi_6_ax200:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_wireless-ac_9560:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_wireless-ac_9462:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_wireless-ac_9461:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_wireless-ac_9260:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_dual_band_wireless-ac_8265:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:dual_band_wireless-ac_8260:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_dual_band_wireless-ac_3168:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_wireless_7265_rev_d_family:*:*:*:*:*:*:*:*
• cpe:2.3:h:intel:intel_dual_band_wireless-ac_3165:*:*:*:*:*:*:*:*
• cpe:2.3:a:intel:intel_wireless_bluetooth:*:*:*:*:*:*:*:*
• cpe:2.3:a:intel:intel_killer_bluetooth:*:*:*:*:*:*:*:*

External links

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00606.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.