CVE-2026-20752: intel proset/wireless wifi

csirt@kutim:~/threat-intel/cve/CVE-2026-20752

CVSS 4.4 · Medium EPSS 0,14%

Kerentanan Improper Authentication pada intel proset/wireless wifi. Skor CVSS 3.1 4.4 (Medium) menurut NVD.

Deskripsi (NVD)

Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Rincian

Terbit di NVD: 11 Agustus 2026
Terakhir diubah: 26 Agustus 2026
Status NVD: Analyzed
CVSS 3.1: 4.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-287: Improper Authentication
EPSS (30 hari): 0,14% peluang dieksploitasi; lebih tinggi dari 2,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
intel	proset/wireless wifi	Semua versi sebelum 24.30.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01468.html advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.