CVE-2019-0136

Severity: high (CVSS 7.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-06-13 · updated 2026-06-17

Description

Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Affected products

Intel(R) PROSet/Wireless WiFi Software for Windows: before 21.10 — fixed in 21.10

How to fix

Upgrade to a fixed version: Intel(R) PROSet/Wireless WiFi Software for Windows 21.10. Check the vendor advisory for mitigations.

References

http://jvn.jp/en/jp/JVN75617741/index.html
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
http://www.securityfocus.com/bid/108777
https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html
https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html
https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
https://support.lenovo.com/us/en/product_security/LEN-27828
https://usn.ubuntu.com/4115-1/
https://usn.ubuntu.com/4118-1/
https://usn.ubuntu.com/4145-1/
https://usn.ubuntu.com/4147-1/

Get alerted when CVE-2019-0136 or the next vulnerability affects your stack