CVE-2023-38417

Vulnerability

Overview

CVE-2023-38417 is a medium-severity denial-of-service vulnerability affecting Intel(R) PROSet/Wireless WiFi software prior to version 23.20. The issue stems from improper input validation, which can be exploited by an unauthenticated attacker with adjacent access to crash or disrupt the software, leading to a denial-of-service condition [1].

Attack

Vector and Prerequisites

An attacker must be within physical or logical proximity to the target system (adjacent access) to exploit this vulnerability. No authentication is required, and the attack complexity is low, as indicated by the CVSS v3 base score of 4.3 [1]. The attack surface is limited to wireless networks where the vulnerable software is running.

Impact and

Mitigation

Successful exploitation results in a denial-of-service scenario, which could disrupt network connectivity or degrade system performance. Intel has addressed this vulnerability in version 23.20 of the PROSet/Wireless WiFi software. Users are advised to update to the latest version to mitigate the risk [1].