CVE-2023-28720

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-28720
Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access..

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 4.0

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:intel:killer:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:proset\/wireless:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:killer_wi-fi_6_ax1650:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_wi-fi_6e_ax1675:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_wi-fi_6e_ax1690:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6_ax200:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6_ax201:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6e_ax210:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6e_ax211:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6e_ax411:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:55

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 6.5 		v2 : unknown
v3 : 6.1
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html - Vendor Advisory () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html - Vendor Advisory

29 Oct 2024, 16:06

Type Values Removed Values Added
First Time Intel killer Wi-fi 6e Ax1690
Intel wi-fi 6e Ax411
Intel wi-fi 6e Ax210
Intel wi-fi 6 Ax200
Intel wi-fi 6 Ax201
Intel killer Wi-fi 6 Ax1650
Intel
Intel killer
Intel killer Wi-fi 6e Ax1675
Intel proset\/wireless
Intel wi-fi 6e Ax211
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html - () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html - Vendor Advisory
CPE cpe:2.3:a:intel:killer:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:proset\/wireless:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6e_ax411:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6_ax201:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6_ax200:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_wi-fi_6e_ax1675:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6e_ax211:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_wi-fi_6_ax1650:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_wi-fi_6e_ax1690:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:wi-fi_6e_ax210:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 6.1 		v2 : unknown
v3 : 6.5
Summary
  • (es) La inicialización incorrecta de algunos software Intel(R) PROSet/Wireless e Intel(R) Killer(TM) Wi-Fi anteriores a la versión 22.240 puede permitir que un usuario no autenticado habilite potencialmente la denegación de servicio a través del acceso adyacente.

14 Feb 2024, 15:01

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-14 14:15

Updated : 2024-11-21 07:55

NVD link : CVE-2023-28720

Mitre link : CVE-2023-28720

CVE.ORG link : CVE-2023-28720

JSON object : View

Products Affected

intel

  • wi-fi_6_ax200
  • killer_wi-fi_6e_ax1690
  • killer_wi-fi_6e_ax1675
  • proset\/wireless
  • wi-fi_6e_ax211
  • wi-fi_6e_ax411
  • killer_wi-fi_6_ax1650
  • killer
  • wi-fi_6e_ax210
  • wi-fi_6_ax201
CWE
CWE-665

Improper Initialization