CVE-2021-37409
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may...
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
CVE-2021-37409- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
CVE List
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
CVE-2021-37409- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
EUVDEUVD-2021-23975
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
EUVD-2021-23975- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-prf5-97wh-vpmp
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may...
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
GHSA-prf5-97wh-vpmp- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
OSV
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
CVE-2021-37409- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-37409
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
DEBIAN-CVE-2021-37409- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
- intel killer ac 1550 firmware
- intel killer wi-fi 6 ax1650 firmware
- intel killer wi-fi 6e ax1675 firmware
- intel killer wi-fi 6e ax1690 firmware
- intel proset wi-fi 6e ax210 firmware
- intel wi-fi 6 ax200 firmware
- intel wi-fi 6 ax201 firmware
- intel wi-fi 6e ax211 firmware
- intel wi-fi 6e ax411 firmware
- intel wireless-ac 9260 firmware
- intel wireless-ac 9461 firmware
- intel wireless-ac 9462 firmware
Show 1 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firmware-nonfreeDebian:12 |
before 20220913-1, plus listed versions 0.10.100.110.120.13 Show 45 moreShow less0.13~bpo40+10.140.14+lenny10.14+lenny20.150.160.16~bpo50+10.170.17~bpo50+10.180.190.20.200.210.220.230.23~bpo50+10.240.24~bpo50+10.250.260.270.27~bpo50+10.280.28+squeeze10.290.30.300.310.320.32~bpo60+10.330.340.350.35~bpo60+10.360.36+wheezy.10.36+wheezy.1~bpo60+10.370.380.38~bpo70+10.390.39~bpo70+10.40.4+etchnhalf.1 |
20220913-1 |
firmware-nonfreeDebian:13 |
before 20220913-1, plus listed versions 0.10.100.110.120.13 Show 45 moreShow less0.13~bpo40+10.140.14+lenny10.14+lenny20.150.160.16~bpo50+10.170.17~bpo50+10.180.190.20.200.210.220.230.23~bpo50+10.240.24~bpo50+10.250.260.270.27~bpo50+10.280.28+squeeze10.290.30.300.310.320.32~bpo60+10.330.340.350.35~bpo60+10.360.36+wheezy.10.36+wheezy.1~bpo60+10.370.380.38~bpo70+10.390.39~bpo70+10.40.4+etchnhalf.1 |
20220913-1 |
firmware-nonfreeDebian:14 |
before 20220913-1, plus listed versions 0.10.100.110.120.13 Show 45 moreShow less0.13~bpo40+10.140.14+lenny10.14+lenny20.150.160.16~bpo50+10.170.17~bpo50+10.180.190.20.200.210.220.230.23~bpo50+10.240.24~bpo50+10.250.260.270.27~bpo50+10.280.28+squeeze10.290.30.300.310.320.32~bpo60+10.330.340.350.35~bpo60+10.360.36+wheezy.10.36+wheezy.1~bpo60+10.370.380.38~bpo70+10.390.39~bpo70+10.40.4+etchnhalf.1 |
20220913-1 |
firmware-nonfreeDebian:10 From an advisory covering 11 CVEs |
before 20190114+really20220913-0+deb10u1, plus listed versions 0.10.100.110.120.13 Show 45 moreShow less0.13~bpo40+10.140.14+lenny10.14+lenny20.150.160.16~bpo50+10.170.17~bpo50+10.180.190.20.200.210.220.230.23~bpo50+10.240.24~bpo50+10.250.260.270.27~bpo50+10.280.28+squeeze10.290.30.300.310.320.32~bpo60+10.330.340.350.35~bpo60+10.360.36+wheezy.10.36+wheezy.1~bpo60+10.370.380.38~bpo70+10.390.39~bpo70+10.40.4+etchnhalf.1 |
20190114+really20220913-0+deb10u1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-37409 is a high vulnerability (CVSS 7.8) in Intel Killer Ac 1550 Firmware, published August 18, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in firmware-nonfree 20220913-1.
References
Left out here: 292 versions. The JSON record has them.