{"id":"CVE-2024-28049","aliases":["DEBIAN-CVE-2024-28049","EUVD-2024-25219","GHSA-wpcc-2qm5-qrcg"],"status":"published","title":"Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R)...","description":"Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access.","severity":{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00247,"percentile":0.16116,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2024-11-13T20:36:12Z","modified":"2026-11-02T12:02:10Z","fixes":[{"ecosystem":"Debian:13","package":"firmware-nonfree","fixed_in":["20240610-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firmware-nonfree","fixed_in":["20240610-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"firmware-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1","0.10","0.11","0.12","0.13","0.13~bpo40+1","0.14","0.14+lenny1","0.14+lenny2","0.15","0.16","0.16~bpo50+1","0.17","0.17~bpo50+1","0.18","0.19","0.2","0.20","0.21","0.22","0.23","0.23~bpo50+1","0.24","0.24~bpo50+1","0.25","0.26","0.27","0.27~bpo50+1","0.28","0.28+squeeze1","0.29","0.3","0.30","0.31","0.32","0.32~bpo60+1","0.33","0.34","0.35","0.35~bpo60+1","0.36","0.36+wheezy.1","0.36+wheezy.1~bpo60+1","0.37","0.38","0.38~bpo70+1","0.39","0.39~bpo70+1","0.4","0.4+etchnhalf.1","0.40","0.40~bpo70+1","0.41","0.41~bpo70+1","0.42","0.43","0.43~bpo70+1","0.44","0.44~bpo8+1","0.4etch1","0.5","0.6","0.7","0.8","0.9","20151018-1","20151018-2","20151018-2~bpo8+1","20151207-1","20151207-1~bpo8+1","20160110-1","20160110-1~bpo8+1","20160824-1","20160824-1~bpo8+1","20161130-1","20161130-2","20161130-2~bpo8+1","20161130-3","20161130-3~bpo8+1","20161130-4","20161130-4~deb8u1","20161130-5","20161130-5~deb8u1","20170823-1","20170823-1~bpo9+1","20180518-1","20180518-1~bpo9+1","20180825+dfsg-1","20180825+dfsg-1~bpo9+1","20180825-1","20190114-1","20190114-1~bpo9+1","20190114-1~bpo9+2","20190114-2","20190114-2~bpo9+1","20190114-2~deb9u1","20190502-1","20190717-1","20190717-2","20190717-2~bpo10+1","20200421-1","20200619-1","20200619-1~bpo10+1","20200721-1","20200721-1~bpo10+1","20200817-1","20200817-1~bpo10+1","20200918-1","20200918-1~bpo10+1","20201022-1","20201118-1","20201218-1","20201218-2","20201218-3","20210208-1","20210208-2","20210208-3","20210208-4","20210208-4~bpo10+1","20210315-1","20210315-1~exp1","20210315-2","20210315-2~bpo10+1","20210315-3","20210315-3~bpo10+1","20210322-1~exp1","20210427-1","20210511-1","20210511-1~exp1","20210716-1~exp1","20210818-1","20210818-1~bpo11+1","20220913-1","20221012-1","20221109-1","20221109-2","20221109-3","20221109-4","20221214-1","20221214-2","20221214-3","20221214-5","20230117-1","20230117-2","20230210-1","20230210-2","20230210-3","20230210-4","20230210-4~bpo11+1","20230210-5","20230210-5~bpo11+1","20230310-1~exp1","20230310-1~exp2","20230404-1","20230515-1","20230515-2","20230515-3","20230515-4","20230625-1","20230625-2","20230625-3~exp2","20230625-3~exp3","20240610-1","20240709-1","20240709-2","20240709-2~bpo12+1","20240811-1","20240909-1","20240909-2","20241210-1","20241210-1~bpo12+1","20250109-1","20250211-1","20250311-1","20250410-1","20250410-2","20250410-2~bpo12+1","20250509-1","20250613-1","20250627-1","20250708-1","20250808-1","20250808-1~bpo13+1","20250917-1","20251011-1","20251021-1","20251021-1~bpo13+1","20251111-1","20251111-1~bpo13+1","20251125-1","20260110-1","20260110-1~bpo13+1","20260221-1","20260221-1~bpo13+1","20260309-1","20260309-1~bpo13+1","20260410-1","20260410-1~bpo13+1","20260519-1","20260519-1~bpo13+1","20260622-1","20260622-1~bpo13+1","20260810-1","20260810-1~bpo13+1","20260916-1","20260916-1~bpo13+1"]},{"source":"osv","ecosystem":"Debian:13","package":"firmware-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240610-1"}]}],"versions":["0.1","0.10","0.11","0.12","0.13","0.13~bpo40+1","0.14","0.14+lenny1","0.14+lenny2","0.15","0.16","0.16~bpo50+1","0.17","0.17~bpo50+1","0.18","0.19","0.2","0.20","0.21","0.22","0.23","0.23~bpo50+1","0.24","0.24~bpo50+1","0.25","0.26","0.27","0.27~bpo50+1","0.28","0.28+squeeze1","0.29","0.3","0.30","0.31","0.32","0.32~bpo60+1","0.33","0.34","0.35","0.35~bpo60+1","0.36","0.36+wheezy.1","0.36+wheezy.1~bpo60+1","0.37","0.38","0.38~bpo70+1","0.39","0.39~bpo70+1","0.4","0.4+etchnhalf.1","0.40","0.40~bpo70+1","0.41","0.41~bpo70+1","0.42","0.43","0.43~bpo70+1","0.44","0.44~bpo8+1","0.4etch1","0.5","0.6","0.7","0.8","0.9","20151018-1","20151018-2","20151018-2~bpo8+1","20151207-1","20151207-1~bpo8+1","20160110-1","20160110-1~bpo8+1","20160824-1","20160824-1~bpo8+1","20161130-1","20161130-2","20161130-2~bpo8+1","20161130-3","20161130-3~bpo8+1","20161130-4","20161130-4~deb8u1","20161130-5","20161130-5~deb8u1","20170823-1","20170823-1~bpo9+1","20180518-1","20180518-1~bpo9+1","20180825+dfsg-1","20180825+dfsg-1~bpo9+1","20180825-1","20190114-1","20190114-1~bpo9+1","20190114-1~bpo9+2","20190114-2","20190114-2~bpo9+1","20190114-2~deb9u1","20190502-1","20190717-1","20190717-2","20190717-2~bpo10+1","20200421-1","20200619-1","20200619-1~bpo10+1","20200721-1","20200721-1~bpo10+1","20200817-1","20200817-1~bpo10+1","20200918-1","20200918-1~bpo10+1","20201022-1","20201118-1","20201218-1","20201218-2","20201218-3","20210208-1","20210208-2","20210208-3","20210208-4","20210208-4~bpo10+1","20210315-1","20210315-1~exp1","20210315-2","20210315-2~bpo10+1","20210315-3","20210315-3~bpo10+1","20210322-1~exp1","20210427-1","20210511-1","20210511-1~exp1","20210716-1~exp1","20210818-1","20210818-1~bpo11+1","20220913-1","20221012-1","20221109-1","20221109-2","20221109-3","20221109-4","20221214-1","20221214-2","20221214-3","20221214-5","20230117-1","20230117-2","20230210-1","20230210-2","20230210-3","20230210-4","20230210-4~bpo11+1","20230210-5","20230210-5~bpo11+1","20230310-1~exp1","20230310-1~exp2","20230404-1","20230515-1","20230515-2","20230515-3","20230515-4","20230625-1","20230625-2","20230625-3~exp2","20230625-3~exp3"]},{"source":"osv","ecosystem":"Debian:14","package":"firmware-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240610-1"}]}],"versions":["0.1","0.10","0.11","0.12","0.13","0.13~bpo40+1","0.14","0.14+lenny1","0.14+lenny2","0.15","0.16","0.16~bpo50+1","0.17","0.17~bpo50+1","0.18","0.19","0.2","0.20","0.21","0.22","0.23","0.23~bpo50+1","0.24","0.24~bpo50+1","0.25","0.26","0.27","0.27~bpo50+1","0.28","0.28+squeeze1","0.29","0.3","0.30","0.31","0.32","0.32~bpo60+1","0.33","0.34","0.35","0.35~bpo60+1","0.36","0.36+wheezy.1","0.36+wheezy.1~bpo60+1","0.37","0.38","0.38~bpo70+1","0.39","0.39~bpo70+1","0.4","0.4+etchnhalf.1","0.40","0.40~bpo70+1","0.41","0.41~bpo70+1","0.42","0.43","0.43~bpo70+1","0.44","0.44~bpo8+1","0.4etch1","0.5","0.6","0.7","0.8","0.9","20151018-1","20151018-2","20151018-2~bpo8+1","20151207-1","20151207-1~bpo8+1","20160110-1","20160110-1~bpo8+1","20160824-1","20160824-1~bpo8+1","20161130-1","20161130-2","20161130-2~bpo8+1","20161130-3","20161130-3~bpo8+1","20161130-4","20161130-4~deb8u1","20161130-5","20161130-5~deb8u1","20170823-1","20170823-1~bpo9+1","20180518-1","20180518-1~bpo9+1","20180825+dfsg-1","20180825+dfsg-1~bpo9+1","20180825-1","20190114-1","20190114-1~bpo9+1","20190114-1~bpo9+2","20190114-2","20190114-2~bpo9+1","20190114-2~deb9u1","20190502-1","20190717-1","20190717-2","20190717-2~bpo10+1","20200421-1","20200619-1","20200619-1~bpo10+1","20200721-1","20200721-1~bpo10+1","20200817-1","20200817-1~bpo10+1","20200918-1","20200918-1~bpo10+1","20201022-1","20201118-1","20201218-1","20201218-2","20201218-3","20210208-1","20210208-2","20210208-3","20210208-4","20210208-4~bpo10+1","20210315-1","20210315-1~exp1","20210315-2","20210315-2~bpo10+1","20210315-3","20210315-3~bpo10+1","20210322-1~exp1","20210427-1","20210511-1","20210511-1~exp1","20210716-1~exp1","20210818-1","20210818-1~bpo11+1","20220913-1","20221012-1","20221109-1","20221109-2","20221109-3","20221109-4","20221214-1","20221214-2","20221214-3","20221214-5","20230117-1","20230117-2","20230210-1","20230210-2","20230210-3","20230210-4","20230210-4~bpo11+1","20230210-5","20230210-5~bpo11+1","20230310-1~exp1","20230310-1~exp2","20230404-1","20230515-1","20230515-2","20230515-3","20230515-4","20230625-1","20230625-2","20230625-3~exp2","20230625-3~exp3"]}],"products":[{"vendor":"intel","product":"killer"},{"vendor":"intel","product":"proset\\/wireless_wifi"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01108.html","tags":["Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28049"},{"url":"https://github.com/advisories/GHSA-wpcc-2qm5-qrcg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-28049","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-28049","description":"Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access.","status":"published","published":"2024-11-13T20:36:12.489Z","modified":"2024-11-13T20:49:43.787Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:18.951288Z"}],"euvd":[{"id":"EUVD-2024-25219","description":"Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access.","status":"published","published":"2024-11-13T20:36:12Z","modified":"2024-11-13T20:49:43Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-03T00:05:01.264685Z"}],"ghsa":[{"id":"GHSA-wpcc-2qm5-qrcg","title":"Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R)...","description":"Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access.","status":"published","published":"2024-11-13T21:30:35Z","modified":"2024-11-13T21:30:36Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:58:49.748387Z"}],"nvd":[{"id":"CVE-2024-28049","description":"Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access.","status":"published","published":"2024-11-13T21:15:13.89Z","modified":"2026-06-17T07:20:52.253Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:10:37.281254Z"}],"osv":[{"id":"CVE-2024-28049","description":"Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access.","status":"published","published":"2024-11-13T21:15:13.89Z","modified":"2026-04-10T05:11:21.678424Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:44:39.569658Z"},{"id":"DEBIAN-CVE-2024-28049","description":"Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access.","status":"published","published":"2024-11-13T21:15:13.89Z","modified":"2026-11-02T12:02:10.660839129Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:45:42.530184Z"}]}}