#VU79527 Input validation error in Intel products - CVE-2022-38076

Vulnerability identifier: #VU79527

Vulnerability risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-38076

CWE-ID: CWE-20

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Intel Wireless-AC 9560
Hardware solutions / Firmware
Intel Wireless-AC 9462
Hardware solutions / Firmware
Intel Wireless-AC 9461
Hardware solutions / Firmware
Intel Wireless-AC 9260
Hardware solutions / Firmware
Intel Dual Band Wireless-AC 3168
Hardware solutions / Firmware
Intel Wireless 7265 (Rev D) Family
Hardware solutions / Firmware
Intel Dual Band Wireless-AC 3165
Hardware solutions / Firmware
Intel Dual Band Wireless-AC 8265
Hardware solutions / Firmware
Intel Dual Band Wireless-AC 8260
Hardware solutions / Firmware
Killer Wireless-AC 1550
Hardware solutions / Firmware

Vendor: Intel

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A local user can pass specially crafted input to the system and perform a denial of service (DoS) attack.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Intel Wireless-AC 9560: before 22.200

Intel Wireless-AC 9462: before 22.200

Intel Wireless-AC 9461: before 22.200

Intel Wireless-AC 9260: before 22.200

Intel Dual Band Wireless-AC 3168: before 22.200

Intel Wireless 7265 (Rev D) Family: before 22.200

Intel Dual Band Wireless-AC 3165: before 22.200

Intel Dual Band Wireless-AC 8265: before 22.200

Intel Dual Band Wireless-AC 8260: before 22.200

Killer Wireless-AC 1550: before 3.2.20.23023

---

External links
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.