{"id":"CVE-2021-33115","aliases":["EUVD-2021-19830","GHSA-22v8-m2j9-v5f6","UBUNTU-CVE-2021-33115"],"status":"published","title":"Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an...","description":"Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00691,"percentile":0.53125,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2022-02-09T22:04:37Z","modified":"2026-10-17T12:57:13Z","affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.116","1.117","1.118","1.119","1.121","1.122","1.123","1.124","1.125","1.126","1.127","1.127.2","1.127.3","1.127.4","1.127.5","1.127.6","1.127.7","1.127.8","1.127.10","1.127.11","1.127.12","1.127.13","1.127.14","1.127.15","1.127.16","1.127.18","1.127.19","1.127.20","1.127.22","1.127.23","1.127.24"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.149","1.150","1.152","1.153","1.154","1.155","1.156","1.157","1.157.1","1.157.2","1.157.3","1.157.4","1.157.5","1.157.6","1.157.8","1.157.10","1.157.11","1.157.12","1.157.13","1.157.14","1.157.15","1.157.16","1.157.17","1.157.18","1.157.19","1.157.20","1.157.21","1.157.22","1.157.23"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.169","1.170","1.171","1.172","1.173","1.173.1","1.173.2","1.173.3","1.173.5","1.173.6","1.173.8","1.173.9","1.173.12","1.173.13","1.173.14","1.173.15","1.173.16","1.173.17","1.173.18","1.173.19","1.173.20","1.173.21"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.183","1.183.1","1.183.2","1.184","1.185","1.186","1.187","1.187.1","1.187.2","1.187.3","1.187.4","1.187.6","1.187.7","1.187.8","1.187.9","1.187.10","1.187.11","1.187.12","1.187.14","1.187.15","1.187.16","1.187.17","1.187.19","1.187.20","1.187.23","1.187.24","1.187.25","1.187.26","1.187.27","1.187.29","1.187.30","1.187.31","1.187.32","1.187.33","1.187.34","1.187.35","1.187.36","1.187.38","1.187.39"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.201","1.202","1.204","20220124.git0c6a7b3b-0ubuntu1","20220217.git6342082c-0ubuntu1","20220217.git6342082c-0ubuntu3","20220302.gitee0667aa-0ubuntu1","20220314.gitcd01f857-0ubuntu1","20220314.gitcd01f857-0ubuntu2","20220329.git681281e4-0ubuntu1","20220329.git681281e4-0ubuntu3","20220329.git681281e4-0ubuntu3.2","20220329.git681281e4-0ubuntu3.3","20220329.git681281e4-0ubuntu3.4","20220329.git681281e4-0ubuntu3.5","20220329.git681281e4-0ubuntu3.6","20220329.git681281e4-0ubuntu3.7","20220329.git681281e4-0ubuntu3.9","20220329.git681281e4-0ubuntu3.10","20220329.git681281e4-0ubuntu3.11","20220329.git681281e4-0ubuntu3.12","20220329.git681281e4-0ubuntu3.13","20220329.git681281e4-0ubuntu3.14","20220329.git681281e4-0ubuntu3.16","20220329.git681281e4-0ubuntu3.17","20220329.git681281e4-0ubuntu3.18","20220329.git681281e4-0ubuntu3.19","20220329.git681281e4-0ubuntu3.21","20220329.git681281e4-0ubuntu3.22","20220329.git681281e4-0ubuntu3.23","20220329.git681281e4-0ubuntu3.24","20220329.git681281e4-0ubuntu3.26","20220329.git681281e4-0ubuntu3.29","20220329.git681281e4-0ubuntu3.30","20220329.git681281e4-0ubuntu3.31","20220329.git681281e4-0ubuntu3.34","20220329.git681281e4-0ubuntu3.35","20220329.git681281e4-0ubuntu3.36","20220329.git681281e4-0ubuntu3.37","20220329.git681281e4-0ubuntu3.38","20220329.git681281e4-0ubuntu3.39","20220329.git681281e4-0ubuntu3.40","20220329.git681281e4-0ubuntu3.41","20220329.git681281e4-0ubuntu3.42"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20230919.git3672ccab-0ubuntu2.1","20230919.git3672ccab-0ubuntu2.2","20240202.git36777504-0ubuntu1","20240318.git3b128b60-0ubuntu1","20240318.git3b128b60-0ubuntu2","20240318.git3b128b60-0ubuntu2.1","20240318.git3b128b60-0ubuntu2.2","20240318.git3b128b60-0ubuntu2.3","20240318.git3b128b60-0ubuntu2.4","20240318.git3b128b60-0ubuntu2.5","20240318.git3b128b60-0ubuntu2.6","20240318.git3b128b60-0ubuntu2.7","20240318.git3b128b60-0ubuntu2.9","20240318.git3b128b60-0ubuntu2.10","20240318.git3b128b60-0ubuntu2.11","20240318.git3b128b60-0ubuntu2.12","20240318.git3b128b60-0ubuntu2.13","20240318.git3b128b60-0ubuntu2.14","20240318.git3b128b60-0ubuntu2.15","20240318.git3b128b60-0ubuntu2.17","20240318.git3b128b60-0ubuntu2.19","20240318.git3b128b60-0ubuntu2.21","20240318.git3b128b60-0ubuntu2.22","20240318.git3b128b60-0ubuntu2.23","20240318.git3b128b60-0ubuntu2.25","20240318.git3b128b60-0ubuntu2.26","20240318.git3b128b60-0ubuntu2.27","20240318.git3b128b60-0ubuntu2.29","20240318.git3b128b60.0ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20250317.git1d4c88ee-0ubuntu1","20250606.git3b75d677-0ubuntu1","20250701.gite2dad11e-0ubuntu1","20250711.git99d64b4f-0ubuntu1","20250807.gitb6b0b152-0ubuntu1","20250818.git07ed893d-0ubuntu1","20250901.git993ff19b-0ubuntu1","20250901.git993ff19b-0ubuntu1.2","20250901.git993ff19b-0ubuntu1.4","20250901.git993ff19b-0ubuntu1.5","20250901.git993ff19b-0ubuntu1.6","20250901.git993ff19b-0ubuntu1.7","20250901.git993ff19b-0ubuntu1.9","20250901.git993ff19b-0ubuntu1.10","20250901.git993ff19b-0ubuntu1.11"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20260319.git217ca6e4.1ubuntu","20260709.git2c35b1ed.1ubuntu","20260818.giteeed587f.1ubuntu","20260911.giteeccccbe.1ubuntu","20260915.git1522c78a.1ubuntu"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20250901.git993ff19b-0ubuntu1","20251009.git46a6999a-0ubuntu1","20251029.git4f72031f-0ubuntu1","20251125.gitff6418d1-0ubuntu1","20260108.gitd86b47f7-0ubuntu1","20260123.git1b7b9f6c.0ubuntu","20260227.gitd8e138dd.0ubuntu","20260319.git217ca6e4.0ubuntu","20260319.git217ca6e4.1ubuntu"]}],"products":[{"vendor":"intel","product":"uefi_wifi_driver"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00582.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33115"},{"url":"https://github.com/advisories/GHSA-22v8-m2j9-v5f6"},{"url":"https://ubuntu.com/security/CVE-2021-33115","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33115","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-33115","description":"Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","status":"published","published":"2022-02-09T22:04:37Z","modified":"2025-05-05T16:49:54.414Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:10.204494Z"}],"euvd":[{"id":"EUVD-2021-19830","description":"Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","status":"published","published":"2022-02-09T22:04:37Z","modified":"2025-05-05T16:49:54Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-22v8-m2j9-v5f6","title":"Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an...","description":"Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","status":"published","published":"2022-02-11T00:00:56Z","modified":"2025-05-05T18:31:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:02:06.913728Z"}],"nvd":[{"id":"CVE-2021-33115","description":"Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","status":"published","published":"2022-02-09T23:15:15.547Z","modified":"2026-06-17T03:54:11.317Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:04.6896Z"}],"osv":[{"id":"UBUNTU-CVE-2021-33115","description":"Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","status":"published","published":"2022-02-09T23:15:00Z","modified":"2026-10-17T12:57:13.927627781Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:27.332852Z"}]}}