PT-2020-5632 · Intel · Intel Proset/Wireless Wifi

Andrew Hess + 3 · Published 2020-04-14 · Updated 2021-07-21 · CVE-2020-0558

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) PROSet/Wireless WiFi products versions prior to 21.70

Description The issue is related to improper buffer restrictions in the kernel mode driver, which may allow an unprivileged user to potentially enable denial of service via adjacent access. This could be exploited by a remote attacker to cause a denial of service. The vulnerability is associated with out-of-bounds write and stack-based buffer overflow, allowing remote code execution.

Recommendations For versions prior to 21.70, update to version 21.70 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable driver until a patch is applied. Avoid using the driver for critical operations until the issue is resolved. At the moment, there is no additional information about other mitigation measures.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2021-01332

CVE-2020-0558

ZDI-20-494

ZDI-20-495

Affected Products

Intel Proset/Wireless Wifi

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2020-0558 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-495 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0558 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-494 · Security Note
• https://bdu.fstec.ru/vul/2021-01332 · Security Note
• https://t.me/cybersecuritytechnologies/1077 · Telegram Post
• https://t.me/malwr/3541 · Telegram Post
• https://t.me/cibsecurity/11283 · Telegram Post
• https://t.me/cvenotify/2803 · Telegram Post
• https://t.me/sysadm_in_channel/1769 · Telegram Post