CVE-2020-12321

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-12 · updated 2026-10-08

Description

Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Affected products

Intel Dual Band Wireless-Ac 3165 Firmware: before 21.110 — fixed in 21.110
Intel Dual Band Wireless-Ac 3168 Firmware: before 21.110 — fixed in 21.110
Intel Dual Band Wireless-Ac 8260 Firmware: before 21.110 — fixed in 21.110
Intel Dual Band Wireless-Ac 8265 Firmware: before 21.110 — fixed in 21.110
Intel Wi-Fi 6 Ax200 Firmware: before 21.110 — fixed in 21.110
Intel Wi-Fi 6 Ax201 Firmware: before 21.110 — fixed in 21.110
Intel Wireless-Ac 9260 Firmware: before 21.110 — fixed in 21.110
Intel Wireless-Ac 9461 Firmware: before 21.110 — fixed in 21.110
Intel Wireless-Ac 9462 Firmware: before 21.110 — fixed in 21.110
Intel Wireless-Ac 9560 Firmware: before 21.110 — fixed in 21.110
Intel Wireless 7265 (Rev D) Firmware: before 21.110 — fixed in 21.110

How to fix

Upgrade to a fixed version: Intel Dual Band Wireless-Ac 3165 Firmware 21.110; Intel Dual Band Wireless-Ac 3168 Firmware 21.110; Intel Dual Band Wireless-Ac 8260 Firmware 21.110; Intel Dual Band Wireless-Ac 8265 Firmware 21.110; Intel Wi-Fi 6 Ax200 Firmware 21.110; Intel Wi-Fi 6 Ax201 Firmware 21.110; Intel Wireless-Ac 9260 Firmware 21.110; Intel Wireless-Ac 9461 Firmware 21.110; Intel Wireless-Ac 9462 Firmware 21.110; Intel Wireless-Ac 9560 Firmware 21.110; Intel Wireless 7265 (Rev D) Firmware 21.110. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-12321 or the next vulnerability affects your stack