Read the docs
TI-2022-11311 Aliases CVE-2022-28667GHSA-643m-x882-mgjq

Out-of-bounds write in Intel PROSet/Wireless WiFi software

Priority LOW 29CWE-787Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00324 25th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Intel(R) PROSet/Wireless WiFi softwarebefore version 22.140—No fix listedCNA
  • Intel(R) PROSet/Wireless WiFi software Vendor— Affected before version 22.140 Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:o:intel:wi-fi_6e_ax411_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wi-fi_6e_ax411:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wi-fi_6e_ax211_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wi-fi_6e_ax211:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wi-fi_6e_ax210_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wi-fi_6e_ax210:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wi-fi_6e_ax201_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wi-fi_6e_ax201:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wi-fi_6e_ax200_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wi-fi_6e_ax200:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
  • cpe:2.3:o:intel:wi-fi_6e_ax411_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wi-fi_6e_ax411:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wi-fi_6e_ax211_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wi-fi_6e_ax211:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wi-fi_6e_ax210_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wi-fi_6e_ax210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wi-fi_6e_ax201_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wi-fi_6e_ax201:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wi-fi_6e_ax200_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wi-fi_6e_ax200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:intel:wireless-ac_9560_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless-ac_9462_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless-ac_9461_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless-ac_9260_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_8265_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_8260_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_3168_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:dual_band_wireless-ac_3165_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
cpe:2.3:o:intel:wireless_7265_\(rev_d\)_firmware:*:*:*:*:*:*:*:*before 22.140VulnerableIntel
cpe:2.3:h:intel:wireless_7265_\(rev_d\):-:*:*:*:*:*:*:*not specified by NVDRunning onIntel
  • cpe:2.3:o:intel:wireless-ac_9560_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless-ac_9462_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless-ac_9461_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless-ac_9260_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_8265_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_8265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_8260_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_8260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_3168_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_3168:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:dual_band_wireless-ac_3165_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:dual_band_wireless-ac_3165:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
  • cpe:2.3:o:intel:wireless_7265_\(rev_d\)_firmware:*:*:*:*:*:*:*:* Versions before 22.140 Vulnerable ·Intel
  • cpe:2.3:h:intel:wireless_7265_\(rev_d\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-28667
  2. 2026-10-03 Alias added: GHSA-643m-x882-mgjq

References

Advisory 1

  • TI-2020-09850 Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before… CVSS 3.1HIGH 8.8
  • TI-2019-08344 Out-of-bounds write in Intel WIFI Drivers and Intel PROSet/Wireless WiFi Software… CVSS 3.1HIGH 8.8
  • TI-2021-13192 Memory corruption in Intel Wireless Bluetooth and Killer Bluetooth products CVSS 3.1HIGH 7.8
  • TI-2019-08343 Out-of-bounds write in Intel WIFI Drivers and Intel PROSet/Wireless WiFi Software… CVSS 3.1HIGH 7.8
  • TI-2021-05955 Out-of-bounds read in Intel Wireless Bluetooth and Killer Bluetooth products CVSS 3.1HIGH 7.1
  • TI-2021-05946 Out-of-bounds read in Intel PROSet/Wireless WiFi and Killer WiFi products CVSS 3.1MEDIUM 6.5
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences