deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-29549
Published: 2022-08-18
Description: An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first making ownership and permission checks (e.g., to help ensure that a program was installed by root) and without integrity checks (e.g., a checksum comparison against known legitimate programs). Also, the vendor recommendation is to install this agent software with root privileges. Thus, privilege escalation is possible on systems where any of these pathnames is controlled by a non-root user. An example is /opt/firebird/bin/isql, where the /opt/firebird directory is often owned by the firebird user.
CVSS Score: 7.3 (HIGH)
CWE: CWE-354
References: http://packetstormsecurity.com/files/168367/Qualys-Cloud-Agent-Arbitrary-Code-Execution.html; http://seclists.org/fulldisclosure/2022/Sep/10; http://software.firstworks.com/p/getting-started-with-firebird.html
CVE: CVE-2022-29550
Published: 2022-08-18
Description: An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe" output to the /var/log/qualys/qualys-cloud-agent-scan.log file. This may, for example, unexpectedly write credentials (from environment variables) to disk in cleartext. NOTE: there are no common circumstances in which qualys-cloud-agent-scan.log can be read by a user other than root; however, the file contents could be exposed through site-specific operational practices. The vendor does NOT characterize this as a vulnerability because the ps data collection is intentional, and would only capture credentials on a machine that was already affected by the CWE-214 weakness
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: http://packetstormsecurity.com/files/168367/Qualys-Cloud-Agent-Arbitrary-Code-Execution.html; http://seclists.org/fulldisclosure/2022/Sep/10; https://blog.qualys.com/product-tech/2022/08/15/qualys-security-updates-cloud-agent-for-linux
CVE: CVE-2022-37025
Published: 2022-08-18
Description: An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack. This could result in the user gaining elevated permissions and being able to execute arbitrary code due to lack of an integrity check of the configuration file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://attack.mitre.org/techniques/T1218/; https://www.mcafee.com/en-us/antivirus/mcafee-security-scan-plus.html; https://www.mcafee.com/support/?articleId=TS103335&page=shell&shell=article-view
CVE: CVE-2022-36024
Published: 2022-08-18
Description: py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the `application.commands` scope without the `bot` scope. Currently, it appears that all public bots that use slash commands are affected. This issue has been patched in version 2.0.1. There are currently no recommended workarounds - please upgrade to a patched version.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-862, CWE-862
References: https://github.com/Pycord-Development/pycord/pull/1568; https://github.com/Pycord-Development/pycord/security/advisories/GHSA-qmhj-m29v-gvmr; https://github.com/Pycord-Development/pycord/pull/1568
CVE: CVE-2022-2874
Published: 2022-08-18
Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/vim/vim/commit/4875d6ab068f09df88d24d81de40dcd8d56e243d; https://huntr.dev/bounties/95f97dfe-247d-475d-9740-b7adc71f4c79; https://security.gentoo.org/glsa/202305-16
CVE: CVE-2022-36023
Published: 2022-08-18
Description: Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the malformed gateway request and returns an error to the gateway client. There are no known workarounds, users must upgrade to version 2.4.6.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: https://github.com/hyperledger/fabric/pull/3572; https://github.com/hyperledger/fabric/pull/3576; https://github.com/hyperledger/fabric/pull/3577
CVE: CVE-2022-37060
Published: 2022-08-18
Description: FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contains directory traversal characters to disclose the contents of files located outside of the server's restricted path. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/168116/FLIR-AX8-1.46.16-Traversal-Access-Control-Command-Injection-XSS.html; https://gist.github.com/Nwqda/9e16852ab7827dc62b8e44d6180a6899; https://www.flir.com/products/ax8-automation/
CVE: CVE-2022-35174
Published: 2022-08-18
Description: A stored cross-site scripting (XSS) vulnerability in Kirby's Starterkit v3.7.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Tags field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://owasp.org/www-community/attacks/xss/; https://www.youtube.com/watch?v=0lngc_zPTSg; https://owasp.org/www-community/attacks/xss/
CVE: CVE-2022-35175
Published: 2022-08-18
Description: Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /blotter/blotter.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/[PII_REDACTED]/bug_report/blob/main/vendors/itsourcecode.com/barangay-management-system/SQLi-1.md; https://github.com/[PII_REDACTED]/bug_report/blob/main/vendors/itsourcecode.com/barangay-management-system/SQLi-1.md
CVE: CVE-2022-35975
Published: 2022-08-18
Description: The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users using the VSCode extension to manage clusters that are shared amongst other users are affected by this issue. The only safe mitigation is to update to the latest version of the extension.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-78
References: https://github.com/weaveworks/vscode-gitops-tools/security/advisories/GHSA-873x-829r-gxcp; https://github.com/weaveworks/vscode-gitops-tools/security/advisories/GHSA-873x-829r-gxcp
CVE: CVE-2022-37061
Published: 2022-08-18
Description: All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the root privileges. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/168114/FLIX-AX8-1.46.16-Remote-Command-Execution.html; http://packetstormsecurity.com/files/168116/FLIR-AX8-1.46.16-Traversal-Access-Control-Command-Injection-XSS.html; http://packetstormsecurity.com/files/169701/FLIR-AX8-1.46.16-Remote-Command-Injection.html
CVE: CVE-2022-37062
Published: 2022-08-18
Description: All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contains the path of the SQLite users database and download it. A successful exploit could allow the attacker to extract usernames and hashed passwords. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://packetstormsecurity.com/files/168116/FLIR-AX8-1.46.16-Traversal-Access-Control-Command-Injection-XSS.html; https://gist.github.com/Nwqda/9e16852ab7827dc62b8e44d6180a6899; https://www.flir.com/products/ax8-automation/
CVE: CVE-2022-37063
Published: 2022-08-18
Description: All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) due to improper input sanitization. An authenticated remote attacker can execute arbitrary JavaScript code in the web management interface. A successful exploit could allow the attacker to insert malicious JavaScript code. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/168116/FLIR-AX8-1.46.16-Traversal-Access-Control-Command-Injection-XSS.html; https://gist.github.com/Nwqda/9e16852ab7827dc62b8e44d6180a6899; https://www.flir.com/products/ax8-automation/
CVE: CVE-2020-27787
Published: 2022-08-18
Description: A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/upx/upx/commit/e2f60adc95334f47e286838dac33160819c5d74d; https://github.com/upx/upx/issues/333; https://github.com/upx/upx/commit/e2f60adc95334f47e286838dac33160819c5d74d
CVE: CVE-2020-27790
Published: 2022-08-18
Description: A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://github.com/upx/upx/commit/eb90eab6325d009004ffb155e3e33f22d4d3ca26; https://github.com/upx/upx/issues/331; https://github.com/upx/upx/commit/eb90eab6325d009004ffb155e3e33f22d4d3ca26
CVE: CVE-2021-32862
Published: 2022-08-18
Description: The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/jupyter/nbconvert/security/advisories/GHSA-9jmq-rx5f-8jwq; https://github.com/jupyter/nbviewer/security/advisories/GHSA-h274-fcvj-h2wm; https://lists.debian.org/debian-lts-announce/2023/06/msg00003.html
CVE: CVE-2022-2625
Published: 2022-08-18
Description: A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.
CVSS Score: 8.0 (HIGH)
CWE: CWE-915, CWE-1321
References: https://bugzilla.redhat.com/show_bug.cgi?id=2113825; https://security.gentoo.org/glsa/202211-04; https://www.postgresql.org/about/news/postgresql[PII_REDACTED]-1117-1022-and-15-beta-3-released-2496/
CVE: CVE-2022-35204
Published: 2022-08-18
Description: Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/vitejs/vite/issues/8498; https://github.com/vitejs/vite/releases/tag/v2.9.13; https://github.com/vitejs/vite/releases/tag/v3.0.0-beta.4
CVE: CVE-2022-35976
Published: 2022-08-18
Description: The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to arbitrary code execution on behalf of the user running VSCode. Users relying on kubeconfigs that are generated or altered by other processes or users are affected by this issue. Please note that the vulnerability is specific to this extension, and the same kubeconfig would not result in arbitrary code execution when used with kubectl. Using only trust-worthy kubeconfigs is a safe mitigation. However, updating to the latest version of the extension is still highly recommended.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-78
References: https://github.com/weaveworks/vscode-gitops-tools/security/advisories/GHSA-287h-vjhw-jqf7; https://github.com/weaveworks/vscode-gitops-tools/security/advisories/GHSA-287h-vjhw-jqf7
CVE: CVE-2022-37422
Published: 2022-08-18
Description: Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://blog.payara.fish/august-community-5-release; https://www.payara.fish/downloads/; https://blog.payara.fish/august-community-5-release
CVE: CVE-2020-27788
Published: 2022-08-18
Description: An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/upx/upx/commit/1bb93d4fce9f1d764ba57bf5ac154af515b3fc83; https://github.com/upx/upx/issues/332; https://github.com/upx/upx/commit/1bb93d4fce9f1d764ba57bf5ac154af515b3fc83
CVE: CVE-2020-27789
Published: 2022-08-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-27791
Published: 2022-08-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2021-23168
Published: 2022-08-18
Description: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE: CVE-2021-23179
Published: 2022-08-18
Description: Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html
CVE: CVE-2021-23188
Published: 2022-08-18
Description: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.3 (LOW)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE: CVE-2021-23223
Published: 2022-08-18
Description: Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665, CWE-665
References: https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE: CVE-2021-26254
Published: 2022-08-18
Description: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE: CVE-2021-26257
Published: 2022-08-18
Description: Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html
CVE: CVE-2021-26950
Published: 2022-08-18
Description: Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html
CVE: CVE-2021-33060
Published: 2022-08-18
Description: Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00686.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-33126
Published: 2022-08-18
Description: Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html
CVE: CVE-2021-33128
Published: 2022-08-18
Description: Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html
CVE: CVE-2021-33847
Published: 2022-08-18
Description: Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html
CVE: CVE-2021-37409
Published: 2022-08-18
Description: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE: CVE-2021-44470
Published: 2022-08-18
Description: Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00596.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00596.html
CVE: CVE-2021-44545
Published: 2022-08-18
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE: CVE-2022-21139
Published: 2022-08-18
Description: Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-326, CWE-326
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE: CVE-2022-21140
Published: 2022-08-18
Description: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE: CVE-2022-21148
Published: 2022-08-18
Description: Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html
CVE: CVE-2022-21152
Published: 2022-08-18
Description: Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html
CVE: CVE-2022-21160
Published: 2022-08-18
Description: Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html