CVE-2020-0559

CVE Database · CVE-2020-0559

CVE-2020-0559

· HIGHModified

CVSS v3.1

7.8

EPSS

0.29%

Published

Aug 13, 2020

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-732

Affected Products (78)

intel · ac_3165_firmware (up to 21.40.5.1)vulnerable

intel · ac_3168_firmware (up to 21.40.5.1)vulnerable

intel · ac_7265_firmware (up to 21.40.5.1)vulnerable

intel · ac_8260_firmware (up to 21.40.5.1)vulnerable

intel · ac_8265_firmware (up to 21.40.5.1)vulnerable

intel · ac_9260_firmware (up to 21.40.5.1)vulnerable

intel · ac_9461_firmware (up to 21.40.5.1)vulnerable

intel · ac_9462_firmware (up to 21.40.5.1)vulnerable

References (4)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00355.html

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00360.html

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00355.html

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00360.html

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs