Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before…
Priority MEDIUM 42Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00982 62nd percentileScored 2026-11-07
Fix Fixed Red Hat: 5 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel(R) Wireless Bluetooth(R) | before version 21.110 | — | No fix listed | CNA |
- Intel(R) Wireless Bluetooth(R) Vendor— Affected before version 21.110 Fixed in — No fix listed CNA
CPE configurations NVD · 22
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:dual_band_wireless-ac_3168_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:dual_band_wireless-ac_8260_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:dual_band_wireless-ac_8265_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:wi-fi_6_ax200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:wi-fi_6_ax201_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:wi-fi_6_ax201:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
- cpe:2.3:o:intel:dual_band_wireless-ac_3168_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:dual_band_wireless-ac_8260_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:dual_band_wireless-ac_8265_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:wi-fi_6_ax200_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:wi-fi_6_ax200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:wi-fi_6_ax201_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:wi-fi_6_ax201:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Show 12 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:wireless-ac_9260_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:wireless-ac_9461_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:wireless-ac_9462_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:wireless-ac_9560_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:wireless_7265_\(rev_d\)_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:wireless_7265_\(rev_d\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:dual_band_wireless-ac_3165_firmware:*:*:*:*:*:*:*:* | before 21.110 | Vulnerable | Intel |
| cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
- cpe:2.3:o:intel:wireless-ac_9260_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:wireless-ac_9461_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:wireless-ac_9462_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:wireless-ac_9560_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:wireless_7265_\(rev_d\)_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:wireless_7265_\(rev_d\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:dual_band_wireless-ac_3165_firmware:*:*:*:*:*:*:*:* Versions before 21.110 Vulnerable ·Intel
- cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Remediation
Red Hat 5 advisories
- RHSA-2022:7887 Released 2022-11-09 · Red Hat rating Importantlinux-firmware security update
- Red Hat Enterprise Linux Server AUS (v. 7.7) iwl100-firmware-39.31.5.1-73.el7_7, iwl1000-firmware-1:39.31.5.1-73.el7_7, iwl105-firmware-18.168.6.1-73.el7_7 +15
- Red Hat Enterprise Linux Server E4S (v. 7.7) iwl100-firmware-39.31.5.1-73.el7_7, iwl1000-firmware-1:39.31.5.1-73.el7_7, iwl105-firmware-18.168.6.1-73.el7_7 +15
- Red Hat Enterprise Linux Server TUS (v. 7.7) iwl100-firmware-39.31.5.1-73.el7_7, iwl1000-firmware-1:39.31.5.1-73.el7_7, iwl105-firmware-18.168.6.1-73.el7_7 +15
- RHSA-2021:0339 Released 2021-02-02 · Red Hat rating Importantlinux-firmware security update
- Red Hat Enterprise Linux Client (v. 7) iwl100-firmware-39.31.5.1-80.el7_9, iwl1000-firmware-1:39.31.5.1-80.el7_9, iwl105-firmware-18.168.6.1-80.el7_9 +14
- Red Hat Enterprise Linux Server (v. 7) iwl100-firmware-39.31.5.1-80.el7_9, iwl1000-firmware-1:39.31.5.1-80.el7_9, iwl105-firmware-18.168.6.1-80.el7_9 +14
- Red Hat Enterprise Linux Workstation (v. 7) iwl100-firmware-39.31.5.1-80.el7_9, iwl1000-firmware-1:39.31.5.1-80.el7_9, iwl105-firmware-18.168.6.1-80.el7_9 +14
- RHSA-2021:0183 Released 2021-01-19 · Red Hat rating Importantlinux-firmware security update
- Red Hat Enterprise Linux BaseOS EUS (v. 8.1) linux-firmware-20190516-96.git711d3297.el8_1
Show 2 more Red Hat advisories
- RHSA-2020:5479 Released 2020-12-15 · Red Hat rating Importantlinux-firmware security and enhancement update
- Red Hat Enterprise Linux BaseOS (v. 8) iwl100-firmware-39.31.5.1-101.el8_3.1, iwl1000-firmware-1:39.31.5.1-101.el8_3.1, iwl105-firmware-18.168.6.1-101.el8_3.1 +18
- RHSA-2020:5416 Released 2020-12-15 · Red Hat rating Importantlinux-firmware security and bug fix update
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) iwl100-firmware-39.31.5.1-99.el8_2.1, iwl1000-firmware-1:39.31.5.1-99.el8_2.1, iwl105-firmware-18.168.6.1-99.el8_2.1 +18
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2020:5479 |
| Red Hat Enterprise Linux BaseOS EUS (v. 8.1) | Fixed | RHSA-2021:0183 |
| Red Hat Enterprise Linux BaseOS EUS (v. 8.2) | Fixed | RHSA-2020:5416 |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2021:0339 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2021:0339 |
| Red Hat Enterprise Linux Server AUS (v. 7.7) | Fixed | RHSA-2022:7887 |
| Red Hat Enterprise Linux Server E4S (v. 7.7) | Fixed | RHSA-2022:7887 |
| Red Hat Enterprise Linux Server TUS (v. 7.7) | Fixed | RHSA-2022:7887 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2021:0339 |
Not affected: 1 product
- Red Hat Enterprise Linux BaseOS EUS (v. 8.1)
Timeline
- 2026-10-02 Threatist record created from CVE-2020-12321
- 2026-10-03 Alias added: GHSA-mmx9-f32w-9hqf
- 2026-10-08 CISA SSVC decision points changed
More Intel Dual Band Wireless-ac 3165 Firmware vulnerabilities
- TI-2019-08344 Out-of-bounds write in Intel WIFI Drivers and Intel PROSet/Wireless WiFi Software… CVSS 3.1HIGH 8.8
- TI-2021-13192 Memory corruption in Intel Wireless Bluetooth and Killer Bluetooth products CVSS 3.1HIGH 7.8
- TI-2019-08343 Out-of-bounds write in Intel WIFI Drivers and Intel PROSet/Wireless WiFi Software… CVSS 3.1HIGH 7.8
- TI-2021-05955 Out-of-bounds read in Intel Wireless Bluetooth and Killer Bluetooth products CVSS 3.1HIGH 7.1
- TI-2022-11311 Out-of-bounds write in Intel PROSet/Wireless WiFi software CVSS 3.1MEDIUM 6.5
- TI-2021-05946 Out-of-bounds read in Intel PROSet/Wireless WiFi and Killer WiFi products CVSS 3.1MEDIUM 6.5
Sources
- CVE-2020-12321 · CVE Program
- CVE-2020-12321 · NVD
- FIRST EPSS
- GHSA-mmx9-f32w-9hqf · GitHub Advisory Database · CC BY 4.0
- CVE-2020-12321 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences