What’s Vulnerable › Vulnerabilities

CVE-2022-21181

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-18 · updated 2026-06-17
• Weakness: CWE-20

Description

Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Dual Band Wireless-Ac 8260 Firmware: before 22.120 — fixed in 22.120
• Intel Dual Band Wireless-Ac 8265 Firmware: before 22.120 — fixed in 22.120
• Intel Killer Ac 1550 Firmware: before 3.1122.1105 — fixed in 3.1122.1105
• Intel Wireless-Ac 9260 Firmware: before 22.120 — fixed in 22.120
• Intel Wireless-Ac 9461 Firmware: before 22.120 — fixed in 22.120
• Intel Wireless-Ac 9462 Firmware: before 22.120 — fixed in 22.120
• Intel Wireless-Ac 9560 Firmware: before 22.120 — fixed in 22.120

How to fix

Upgrade to a fixed version: Intel Dual Band Wireless-Ac 8260 Firmware 22.120; Intel Dual Band Wireless-Ac 8265 Firmware 22.120; Intel Killer Ac 1550 Firmware 3.1122.1105; Intel Wireless-Ac 9260 Firmware 22.120; Intel Wireless-Ac 9461 Firmware 22.120; Intel Wireless-Ac 9462 Firmware 22.120; Intel Wireless-Ac 9560 Firmware 22.120. Check the vendor advisory for mitigations.

References

• https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
• https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html

Get alerted when CVE-2022-21181 or the next vulnerability affects your stack