← Vulnerability feed

Vulnerability record · CVE-2021-0065 · published 17 November 2021

CVE-2021-0065: Intel ax210 firmware incorrect default permissions vulnerability

Intel · Ax210 Firmware

Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8 CVSS 3.1 High EPSS 0.22% · top 89.3% CWE-276 · Incorrect default permissions
7.8CVSS 3.1 base score, v2 4.6
0.22%EPSS exploitation probability, 30 days
NoNot in CISA KEV
13Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

13 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html Vendor Advisory

Track CVE-2021-0065 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2021-0071Intel ax210 firmware improper input validation vulnerabilityImproper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalati…EPSS 0.42%8.1CVE-2021-33113Intel ac 3165 firmware improper input validation vulnerabilityImproper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an …EPSS 0.69%8.1CVE-2021-0078Intel ax210 firmware improper input validation vulnerabilityImproper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to p…EPSS 0.43%7.8CVE-2021-0151Intel ax210 firmware vulnerabilityImproper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an auth…EPSS 0.25%7.8CVE-2021-0064Intel ax210 firmware incorrect permission assignment vulnerabilityInsecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated…EPSS 0.22%7.8CVE-2021-0082Intel ax210 firmware uncontrolled search path element vulnerabilityUncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable …EPSS 0.26%7.8CVE-2020-0555Intel ax201 firmware improper input validation vulnerabilityImproper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentially enable escalation of privil…EPSS 0.32%7.8CVE-2020-0559Intel ac 3165 firmware incorrect permission assignment vulnerabilityInsecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticat…EPSS 0.29%

Source: NIST National Vulnerability Database (record CVE-2021-0065), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.