PT-2025-21085 · Intel · Intel Proset/Wireless Wifi

Published 2025-05-13 · Updated 2025-05-14 · CVE-2025-20062

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:A/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: Intel(R) PROSet/Wireless WiFi Software for Windows versions prior to 23.100

Description: The issue is related to a use after free condition that may allow an unauthenticated user to potentially enable denial of service via adjacent access. This could be exploited by an attacker to disrupt the service.

Recommendations: For versions prior to 23.100, update to version 23.100 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected software to minimize the risk of exploitation.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-09949

CVE-2025-20062

Affected Products

Intel Proset/Wireless Wifi

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-20062 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20062 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09949 · Security Note
• https://twitter.com/CVEnew/status/1922502452558921904 · Twitter Post