{"id":"CVE-2021-37409","aliases":["DEBIAN-CVE-2021-37409","DLA-3380-1","EUVD-2021-23975","GHSA-prf5-97wh-vpmp"],"status":"published","title":"Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may...","description":"Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00237,"percentile":0.14791,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2022-08-18T00:00:00Z","modified":"2026-10-23T18:03:30Z","fixes":[{"ecosystem":"Debian:12","package":"firmware-nonfree","fixed_in":["20220913-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firmware-nonfree","fixed_in":["20220913-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firmware-nonfree","fixed_in":["20220913-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"firmware-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220913-1"}]}],"versions":["0.1","0.10","0.11","0.12","0.13","0.13~bpo40+1","0.14","0.14+lenny1","0.14+lenny2","0.15","0.16","0.16~bpo50+1","0.17","0.17~bpo50+1","0.18","0.19","0.2","0.20","0.21","0.22","0.23","0.23~bpo50+1","0.24","0.24~bpo50+1","0.25","0.26","0.27","0.27~bpo50+1","0.28","0.28+squeeze1","0.29","0.3","0.30","0.31","0.32","0.32~bpo60+1","0.33","0.34","0.35","0.35~bpo60+1","0.36","0.36+wheezy.1","0.36+wheezy.1~bpo60+1","0.37","0.38","0.38~bpo70+1","0.39","0.39~bpo70+1","0.4","0.4+etchnhalf.1","0.40","0.40~bpo70+1","0.41","0.41~bpo70+1","0.42","0.43","0.43~bpo70+1","0.44","0.44~bpo8+1","0.4etch1","0.5","0.6","0.7","0.8","0.9","20151018-1","20151018-2","20151018-2~bpo8+1","20151207-1","20151207-1~bpo8+1","20160110-1","20160110-1~bpo8+1","20160824-1","20160824-1~bpo8+1","20161130-1","20161130-2","20161130-2~bpo8+1","20161130-3","20161130-3~bpo8+1","20161130-4","20161130-4~deb8u1","20161130-5","20161130-5~deb8u1","20170823-1","20170823-1~bpo9+1","20180518-1","20180518-1~bpo9+1","20180825+dfsg-1","20180825+dfsg-1~bpo9+1","20180825-1","20190114-1","20190114-1~bpo9+1","20190114-1~bpo9+2","20190114-2","20190114-2~bpo9+1","20190114-2~deb9u1","20190502-1","20190717-1","20190717-2","20190717-2~bpo10+1","20200421-1","20200619-1","20200619-1~bpo10+1","20200721-1","20200721-1~bpo10+1","20200817-1","20200817-1~bpo10+1","20200918-1","20200918-1~bpo10+1","20201022-1","20201118-1","20201218-1","20201218-2","20201218-3","20210208-1","20210208-2","20210208-3","20210208-4","20210208-4~bpo10+1","20210315-1","20210315-1~exp1","20210315-2","20210315-2~bpo10+1","20210315-3","20210315-3~bpo10+1","20210322-1~exp1","20210427-1","20210511-1","20210511-1~exp1","20210716-1~exp1","20210818-1","20210818-1~bpo11+1"]},{"source":"osv","ecosystem":"Debian:13","package":"firmware-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220913-1"}]}],"versions":["0.1","0.10","0.11","0.12","0.13","0.13~bpo40+1","0.14","0.14+lenny1","0.14+lenny2","0.15","0.16","0.16~bpo50+1","0.17","0.17~bpo50+1","0.18","0.19","0.2","0.20","0.21","0.22","0.23","0.23~bpo50+1","0.24","0.24~bpo50+1","0.25","0.26","0.27","0.27~bpo50+1","0.28","0.28+squeeze1","0.29","0.3","0.30","0.31","0.32","0.32~bpo60+1","0.33","0.34","0.35","0.35~bpo60+1","0.36","0.36+wheezy.1","0.36+wheezy.1~bpo60+1","0.37","0.38","0.38~bpo70+1","0.39","0.39~bpo70+1","0.4","0.4+etchnhalf.1","0.40","0.40~bpo70+1","0.41","0.41~bpo70+1","0.42","0.43","0.43~bpo70+1","0.44","0.44~bpo8+1","0.4etch1","0.5","0.6","0.7","0.8","0.9","20151018-1","20151018-2","20151018-2~bpo8+1","20151207-1","20151207-1~bpo8+1","20160110-1","20160110-1~bpo8+1","20160824-1","20160824-1~bpo8+1","20161130-1","20161130-2","20161130-2~bpo8+1","20161130-3","20161130-3~bpo8+1","20161130-4","20161130-4~deb8u1","20161130-5","20161130-5~deb8u1","20170823-1","20170823-1~bpo9+1","20180518-1","20180518-1~bpo9+1","20180825+dfsg-1","20180825+dfsg-1~bpo9+1","20180825-1","20190114-1","20190114-1~bpo9+1","20190114-1~bpo9+2","20190114-2","20190114-2~bpo9+1","20190114-2~deb9u1","20190502-1","20190717-1","20190717-2","20190717-2~bpo10+1","20200421-1","20200619-1","20200619-1~bpo10+1","20200721-1","20200721-1~bpo10+1","20200817-1","20200817-1~bpo10+1","20200918-1","20200918-1~bpo10+1","20201022-1","20201118-1","20201218-1","20201218-2","20201218-3","20210208-1","20210208-2","20210208-3","20210208-4","20210208-4~bpo10+1","20210315-1","20210315-1~exp1","20210315-2","20210315-2~bpo10+1","20210315-3","20210315-3~bpo10+1","20210322-1~exp1","20210427-1","20210511-1","20210511-1~exp1","20210716-1~exp1","20210818-1","20210818-1~bpo11+1"]},{"source":"osv","ecosystem":"Debian:14","package":"firmware-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220913-1"}]}],"versions":["0.1","0.10","0.11","0.12","0.13","0.13~bpo40+1","0.14","0.14+lenny1","0.14+lenny2","0.15","0.16","0.16~bpo50+1","0.17","0.17~bpo50+1","0.18","0.19","0.2","0.20","0.21","0.22","0.23","0.23~bpo50+1","0.24","0.24~bpo50+1","0.25","0.26","0.27","0.27~bpo50+1","0.28","0.28+squeeze1","0.29","0.3","0.30","0.31","0.32","0.32~bpo60+1","0.33","0.34","0.35","0.35~bpo60+1","0.36","0.36+wheezy.1","0.36+wheezy.1~bpo60+1","0.37","0.38","0.38~bpo70+1","0.39","0.39~bpo70+1","0.4","0.4+etchnhalf.1","0.40","0.40~bpo70+1","0.41","0.41~bpo70+1","0.42","0.43","0.43~bpo70+1","0.44","0.44~bpo8+1","0.4etch1","0.5","0.6","0.7","0.8","0.9","20151018-1","20151018-2","20151018-2~bpo8+1","20151207-1","20151207-1~bpo8+1","20160110-1","20160110-1~bpo8+1","20160824-1","20160824-1~bpo8+1","20161130-1","20161130-2","20161130-2~bpo8+1","20161130-3","20161130-3~bpo8+1","20161130-4","20161130-4~deb8u1","20161130-5","20161130-5~deb8u1","20170823-1","20170823-1~bpo9+1","20180518-1","20180518-1~bpo9+1","20180825+dfsg-1","20180825+dfsg-1~bpo9+1","20180825-1","20190114-1","20190114-1~bpo9+1","20190114-1~bpo9+2","20190114-2","20190114-2~bpo9+1","20190114-2~deb9u1","20190502-1","20190717-1","20190717-2","20190717-2~bpo10+1","20200421-1","20200619-1","20200619-1~bpo10+1","20200721-1","20200721-1~bpo10+1","20200817-1","20200817-1~bpo10+1","20200918-1","20200918-1~bpo10+1","20201022-1","20201118-1","20201218-1","20201218-2","20201218-3","20210208-1","20210208-2","20210208-3","20210208-4","20210208-4~bpo10+1","20210315-1","20210315-1~exp1","20210315-2","20210315-2~bpo10+1","20210315-3","20210315-3~bpo10+1","20210322-1~exp1","20210427-1","20210511-1","20210511-1~exp1","20210716-1~exp1","20210818-1","20210818-1~bpo11+1"]},{"source":"osv","ecosystem":"Debian:10","package":"firmware-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190114+really20220913-0+deb10u1"}]}],"versions":["0.1","0.10","0.11","0.12","0.13","0.13~bpo40+1","0.14","0.14+lenny1","0.14+lenny2","0.15","0.16","0.16~bpo50+1","0.17","0.17~bpo50+1","0.18","0.19","0.2","0.20","0.21","0.22","0.23","0.23~bpo50+1","0.24","0.24~bpo50+1","0.25","0.26","0.27","0.27~bpo50+1","0.28","0.28+squeeze1","0.29","0.3","0.30","0.31","0.32","0.32~bpo60+1","0.33","0.34","0.35","0.35~bpo60+1","0.36","0.36+wheezy.1","0.36+wheezy.1~bpo60+1","0.37","0.38","0.38~bpo70+1","0.39","0.39~bpo70+1","0.4","0.4+etchnhalf.1","0.40","0.40~bpo70+1","0.41","0.41~bpo70+1","0.42","0.43","0.43~bpo70+1","0.44","0.44~bpo8+1","0.4etch1","0.5","0.6","0.7","0.8","0.9","20151018-1","20151018-2","20151018-2~bpo8+1","20151207-1","20151207-1~bpo8+1","20160110-1","20160110-1~bpo8+1","20160824-1","20160824-1~bpo8+1","20161130-1","20161130-2","20161130-2~bpo8+1","20161130-3","20161130-3~bpo8+1","20161130-4","20161130-4~deb8u1","20161130-5","20161130-5~deb8u1","20170823-1","20170823-1~bpo9+1","20180518-1","20180518-1~bpo9+1","20180825+dfsg-1","20180825+dfsg-1~bpo9+1","20180825-1","20190114-1","20190114-1~bpo9+1","20190114-1~bpo9+2","20190114-2","20190114-2~bpo9+1","20190114-2~deb9u1"],"bundled":11}],"products":[{"vendor":"intel","product":"killer_ac_1550_firmware"},{"vendor":"intel","product":"killer_wi-fi_6_ax1650_firmware"},{"vendor":"intel","product":"killer_wi-fi_6e_ax1675_firmware"},{"vendor":"intel","product":"killer_wi-fi_6e_ax1690_firmware"},{"vendor":"intel","product":"proset_wi-fi_6e_ax210_firmware"},{"vendor":"intel","product":"wi-fi_6_ax200_firmware"},{"vendor":"intel","product":"wi-fi_6_ax201_firmware"},{"vendor":"intel","product":"wi-fi_6e_ax211_firmware"},{"vendor":"intel","product":"wi-fi_6e_ax411_firmware"},{"vendor":"intel","product":"wireless-ac_9260_firmware"},{"vendor":"intel","product":"wireless-ac_9461_firmware"},{"vendor":"intel","product":"wireless-ac_9462_firmware"},{"vendor":"intel","product":"wireless-ac_9560_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html","tags":["x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37409"},{"url":"https://github.com/advisories/GHSA-prf5-97wh-vpmp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-37409","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-37409","description":"Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2022-08-18T00:00:00Z","modified":"2025-05-05T16:46:34.504Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:32:58.028461Z"}],"euvd":[{"id":"EUVD-2021-23975","description":"Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2022-08-18T00:00:00Z","modified":"2025-05-05T16:46:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-prf5-97wh-vpmp","title":"Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may...","description":"Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2022-08-19T00:00:19Z","modified":"2023-04-02T00:30:20Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:54:26.249885Z"}],"nvd":[{"id":"CVE-2021-37409","description":"Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2022-08-18T20:15:09.633Z","modified":"2026-06-17T04:00:28.91Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:07:06.906968Z"}],"osv":[{"id":"CVE-2021-37409","description":"Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2022-08-18T20:15:09.633Z","modified":"2026-03-14T11:03:13.343874Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-37409","description":"Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.","status":"published","published":"2022-08-18T20:15:09.633Z","modified":"2026-10-23T18:03:30.099634322Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"DLA-3380-1","title":"firmware-nonfree - security update","status":"published","published":"2023-04-01T00:00:00Z","modified":"2026-03-09T01:21:47.125836Z","updated_at":"2026-11-02T15:46:11.734021Z"}]}}