LiveActive security incident?Get immediate response
CVE Record

CVE-2021-0168: Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems...

Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.

MediumCVSS 6.7Not KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

CVE-2021-0168 is a local privilege-escalation issue in firmware for some Intel PROSet/Wireless Wi-Fi products and some Killer Wi-Fi products. An attacker already holding high local privileges could potentially gain broader control of the affected system. This is not described as remotely exploitable in the provided sources.

Executive priority

Treat this as a managed endpoint hygiene issue, not an emergency internet-exposed flaw. Prioritize inventory and vendor updates, especially for laptops and privileged-user workstations with affected wireless hardware.

Technical view

The issue is improper input validation, classified as CWE-20, in affected Wi-Fi firmware. The CVSS 3.1 score is 6.7 with local attack vector, low complexity, high privileges required, no user interaction, and high confidentiality, integrity, and availability impact.

Likely exposure

Exposure is most likely on endpoints using affected Intel PROSet/Wireless Wi-Fi across multiple operating systems, or affected Killer Wi-Fi on Windows 10 and 11. Exact affected versions are not included in the bundle and should be verified against Intel SA-00539.

Exploitation context

The provided sources do not show CISA KEV listing or other evidence of active exploitation. The attacker must have local access and high privileges, which limits broad drive-by risk but matters on shared, managed, or already-compromised endpoints.

Researcher notes

The main uncertainty is product and version specificity; the bundle points to Intel’s advisory for details. Do not assume unrelated Intel wireless products are affected without matching the advisory. No exploit steps or public exploitation evidence are provided.

Mitigation direction

  • Review Intel SA-00539 for affected products, versions, and vendor guidance.
  • Inventory Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi adapters across managed endpoints.
  • Apply Intel or OEM-provided wireless firmware and driver updates where applicable.
  • Limit local administrative privileges on endpoints using affected Wi-Fi components.
  • Track endpoint update compliance through device management tooling.

Validation and detection

  • Compare installed Wi-Fi adapter, driver, and firmware versions against Intel SA-00539.
  • Confirm whether Killer Wi-Fi systems run Windows 10 or Windows 11.
  • Verify updates came from Intel, OEM, or approved enterprise channels.
  • Check endpoint management records for successful wireless driver or firmware update installation.
  • Document systems that remain exposed because vendor guidance is unavailable or pending.
Prepared
Confidence
medium
Sources
3

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cwe · low confidence lookup

CWE-20: Exact CWE lookup

Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2021-0168 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Medium
CVSS
6.7 (3.1)
Known Exploited
No
Published

Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

1CVSS vectors
0Timeline events
0ADP providers
2Source links

CVSS vector scores

1 official score

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
6.7CVSS 3.1MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H0.85.9Primary CVE score

Vulnerability scoring details

Base CVSS 3.1 score

6.7Medium
CVSS 3.1 vector shape for CVE-2021-0168Attack VectorAttack ComplexityPrivileges RequiredUser InteractionScopeConfidentiality ImpactIntegrity ImpactAvailability Impact

Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Privileges Required
NoneLowHigh
User Interaction
NoneRequired
Scope
ChangedUnchanged
Confidentiality Impact
HighLowNone
Integrity Impact
HighLowNone
Availability Impact
HighLowNone

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/aIntel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11See referencesListed
Weakness

CWE details

CWE-20

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.