CVE-2021-0152: Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to poten...

Summary

Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable denial of service via local access.

What to do

Update intel ax210_firmware to version 22.60 or later.
Update intel ax201_firmware to version 22.60 or later.
Update intel ax200_firmware to version 22.60 or later.
Update intel ac_9560_firmware to version 22.60 or later.
Update intel ac_9462_firmware to version 22.60 or later.
Update intel ac_9461_firmware to version 22.60 or later.
Update intel ac_9260_firmware to version 22.60 or later.
Update intel ac_8265_firmware to version 22.60 or later.
Update intel ac_8260_firmware to version 22.60 or later.
Update intel ac_3168_firmware to version 22.60 or later.
Update intel ac_7265_firmware to version 22.60 or later.
Update intel ac_3165_firmware to version 22.60 or later.

Affected software

Vendor	Product	Affected versions
intel	ax210_firmware	< 22.60 `cpe:2.3:o:intel:ax210_firmware::::::::`
intel	ax201_firmware	< 22.60 `cpe:2.3:o:intel:ax201_firmware::::::::`
intel	ax200_firmware	< 22.60 `cpe:2.3:o:intel:ax200_firmware::::::::`
intel	ac_9560_firmware	< 22.60 `cpe:2.3:o:intel:ac_9560_firmware::::::::`
intel	ac_9462_firmware	< 22.60 `cpe:2.3:o:intel:ac_9462_firmware::::::::`
intel	ac_9461_firmware	< 22.60 `cpe:2.3:o:intel:ac_9461_firmware::::::::`
intel	ac_9260_firmware	< 22.60 `cpe:2.3:o:intel:ac_9260_firmware::::::::`
intel	ac_8265_firmware	< 22.60 `cpe:2.3:o:intel:ac_8265_firmware::::::::`
intel	ac_8260_firmware	< 22.60 `cpe:2.3:o:intel:ac_8260_firmware::::::::`
intel	ac_3168_firmware	< 22.60 `cpe:2.3:o:intel:ac_3168_firmware::::::::`
intel	ac_7265_firmware	< 22.60 `cpe:2.3:o:intel:ac_7265_firmware::::::::`
intel	ac_3165_firmware	< 22.60 `cpe:2.3:o:intel:ac_3165_firmware::::::::`
intel	ax1675_firmware	All versions `cpe:2.3:o:intel:ax1675_firmware:-:::::::*`
intel	ax1650_firmware	All versions `cpe:2.3:o:intel:ax1650_firmware:-:::::::*`
intel	ac1550_firmware	All versions `cpe:2.3:o:intel:ac1550_firmware:-:::::::*`

Original advisory text

Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to poten...

Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable denial of service via local access.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00540.... Vendor Advisory