What’s Vulnerable › Vulnerabilities

CVE-2021-37409

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-18 · updated 2026-06-17
• Weakness: CWE-863

Description

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Killer Ac 1550 Firmware: before 3.1122.1105 — fixed in 3.1122.1105
• Intel Killer Wi-Fi 6 Ax1650 Firmware: before 3.1122.1105 — fixed in 3.1122.1105
• Intel Killer Wi-Fi 6E Ax1675 Firmware: before 3.1122.1105 — fixed in 3.1122.1105
• Intel Killer Wi-Fi 6E Ax1690 Firmware: before 3.1122.1105 — fixed in 3.1122.1105
• Intel Proset Wi-Fi 6E Ax210 Firmware: before 22.120 — fixed in 22.120
• Intel Wi-Fi 6 Ax200 Firmware: before 22.120 — fixed in 22.120
• Intel Wi-Fi 6 Ax201 Firmware: before 22.120 — fixed in 22.120
• Intel Wi-Fi 6E Ax211 Firmware: before 22.120 — fixed in 22.120
• Intel Wi-Fi 6E Ax411 Firmware: before 22.120 — fixed in 22.120
• Intel Wireless-Ac 9260 Firmware: before 22.120 — fixed in 22.120
• Intel Wireless-Ac 9461 Firmware: before 22.120 — fixed in 22.120
• Intel Wireless-Ac 9462 Firmware: before 22.120 — fixed in 22.120
• Intel Wireless-Ac 9560 Firmware: before 22.120 — fixed in 22.120

How to fix

Upgrade to a fixed version: Intel Killer Ac 1550 Firmware 3.1122.1105; Intel Killer Wi-Fi 6 Ax1650 Firmware 3.1122.1105; Intel Killer Wi-Fi 6E Ax1675 Firmware 3.1122.1105; Intel Killer Wi-Fi 6E Ax1690 Firmware 3.1122.1105; Intel Proset Wi-Fi 6E Ax210 Firmware 22.120; Intel Wi-Fi 6 Ax200 Firmware 22.120; Intel Wi-Fi 6 Ax201 Firmware 22.120; Intel Wi-Fi 6E Ax211 Firmware 22.120; Intel Wi-Fi 6E Ax411 Firmware 22.120; Intel Wireless-Ac 9260 Firmware 22.120; Intel Wireless-Ac 9461 Firmware 22.120; Intel Wireless-Ac 9462 Firmware 22.120. Check the vendor advisory for mitigations.

References

• https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
• https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html

Get alerted when CVE-2021-37409 or the next vulnerability affects your stack