CVE Feed

    Dashboard / CVE / CVE-2021-0152

    CVE-2021-0152

    Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable denial of service via local access.

    Published:Nov 17, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 17, 2021
    EPSS Score:0.00024
    CVSS Score:5.5

    Affected Products

    Vendor
    Intel
    Product
    Ac1550
    Vendor
    Intel
    Product
    Ac1550 Firmware
    Vendor
    Intel
    Product
    Ac 3165
    Vendor
    Intel
    Product
    Ac 3165 Firmware
    Vendor
    Intel
    Product
    Ac 3168
    Vendor
    Intel
    Product
    Ac 3168 Firmware
    Vendor
    Intel
    Product
    Ac 7265
    Vendor
    Intel
    Product
    Ac 7265 Firmware
    Vendor
    Intel
    Product
    Ac 8260
    Vendor
    Intel
    Product
    Ac 8260 Firmware
    Vendor
    Intel
    Product
    Ac 8265
    Vendor
    Intel
    Product
    Ac 8265 Firmware
    Vendor
    Intel
    Product
    Ac 9260
    Vendor
    Intel
    Product
    Ac 9260 Firmware
    Vendor
    Intel
    Product
    Ac 9461
    Vendor
    Intel
    Product
    Ac 9461 Firmware
    Vendor
    Intel
    Product
    Ac 9462
    Vendor
    Intel
    Product
    Ac 9462 Firmware
    Vendor
    Intel
    Product
    Ac 9560
    Vendor
    Intel
    Product
    Ac 9560 Firmware
    Vendor
    Intel
    Product
    Ax1650
    Vendor
    Intel
    Product
    Ax1650 Firmware
    Vendor
    Intel
    Product
    Ax1675
    Vendor
    Intel
    Product
    Ax1675 Firmware
    Vendor
    Intel
    Product
    Ax200
    Vendor
    Intel
    Product
    Ax200 Firmware
    Vendor
    Intel
    Product
    Ax201
    Vendor
    Intel
    Product
    Ax201 Firmware
    Vendor
    Intel
    Product
    Ax210
    Vendor
    Intel
    Product
    Ax210 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-475 Signature Spoofing by Improper Validation

    Related CVEs

    CVE-2021-0053 (CVSS 5.7) — Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 m…
    CVE-2021-0079 (CVSS 6.5) — Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10…
    CVE-2021-0075 (CVSS 5.5) — Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some …
    CVE-2021-0069 (CVSS 6.5) — Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and…
    CVE-2021-0082 (CVSS 7.8) — Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an au…
    CVE-2021-0078 (CVSS 8.1) — Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10…
    CVE-2021-0063 (CVSS 6.5) — Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10…
    CVE-2021-0151 (CVSS 7.8) — Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) p…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High