« Volver al listado

CVE-2021-33115

Estado: ModificadaAlta (8.8)—

Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Intel — Uefi Wifi Driver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-33115",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-33115",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-23T13:31:12.472064Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Intel(R) PROSet/Wireless WiFi in UEFI",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-02-09T23:15:15.547",
  "references": [
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00582.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00582.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access."
    },
    {
      "lang": "es",
      "value": "Una comprobación de entrada inapropiada para algunos Intel(R) PROSet/Wireless WiFi en UEFI puede permitir a un usuario no autenticado habilitar potencialmente una escalada de privilegios por medio del acceso adyacente"
    }
  ],
  "lastModified": "2026-06-17T03:54:11.317",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intel:uefi_wifi_driver:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF103F9A-F382-44B5-981F-F49561090077",
              "versionEndExcluding": "1.2.8.21337"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:ac_3165:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "197A3DA1-B8EF-438F-B933-32253C43C8EE"
            },
            {
              "criteria": "cpe:2.3:h:intel:ac_3168:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ED5B2BCE-2D8A-440C-B866-76E035314022"
            },
            {
              "criteria": "cpe:2.3:h:intel:ac_7265:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8F9F1CE7-8F14-4526-A857-7B954EC4BB6F"
            },
            {
              "criteria": "cpe:2.3:h:intel:ac_8260:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B5A8F30C-6BB7-4CC6-ADBE-1859DAF66C58"
            },
            {
              "criteria": "cpe:2.3:h:intel:ac_8265:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C08E2F3E-C4B5-4227-A88D-C50E209A12CF"
            },
            {
              "criteria": "cpe:2.3:h:intel:ac_9260:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C2795E42-D044-4D48-BCB2-61CC1A3471B1"
            },
            {
              "criteria": "cpe:2.3:h:intel:ac_9461:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A11E55E8-5FA9-4ED7-AB61-03F22EE1759B"
            },
            {
              "criteria": "cpe:2.3:h:intel:ac_9462:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6E89EB0D-233A-486A-BDAE-F5726432CD7E"
            },
            {
              "criteria": "cpe:2.3:h:intel:ac_9560:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D382D4A1-C8FD-4B47-B2C4-145232EC8AC5"
            },
            {
              "criteria": "cpe:2.3:h:intel:ax200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E9903E2E-A670-40D4-8B9F-D2C0CFDBFC9F"
            },
            {
              "criteria": "cpe:2.3:h:intel:ax201:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4649D446-130B-4B31-B9ED-BA7F9F7EEB8F"
            },
            {
              "criteria": "cpe:2.3:h:intel:ax210:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F226D74C-4A48-4AC0-A565-A00D555E27D6"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}